Cybercrime Network

参与者/当事方与技术之间复杂的相互作用，根植于社会的法律的和文化背景，这意味着网络犯罪研究应包括（最好是整合）多个学科：它必须了解犯罪背后的“商业”案例、网络空间中相关的法律的复杂性、社会和心理推动因素、威慑的手段和有效性、网络系统的技术，以及它们之间错综复杂的关系。因此，该网络的目标是高度跨学科，汇集所有上述学科的研究人员，对技术专家（计算机科学家、工程师）和非技术专家（律师、社会科学家和心理学家）的重视程度大致相同，在技术方面，该网络的目标是帮助协调“实际安全”或“应用安全”（因为没有更好的术语）研究。如果与最终使用研究成果的各方合作，实用和应用安全研究将得到最好的发展。研究人员和最终用户之间的互动在设计阶段（从需求捕获到更“亲密”的用户和经验驱动的设计）、开发阶段（通过持续反馈）和技术转让阶段都是有用的。该网络提出了将研究人员和最终用户聚集在一起的创新方法（专业举办的讲习班，角色扮演的演员等），并鼓励和支持其成员在与最终用户互动的方式上进行创新。网络的方案是在两个方面定义：时间和空间，如下：-在“时间”，我们确定了第一阶段（18个月名义上）启动互动和第二阶段（也18个月作为第一次估计）提供的结果，有助于未来的研究。在最初的18个月里，我们的想法是组织研讨会和其他活动，将研究人员和最终用户聚集在一起，以了解在全面应对网络犯罪方面面临的挑战，并制定合理的解决方案。要做到这一点，我们确实需要在第一阶段把重点放在最终用户身上。第二个18个月将根据前18个月的经验教训开展综合研讨会，重点将转向研究和建立研究建议和新网络等。在“空间”方面，该网络将有若干主题，每个主题都有自己的领导人和一系列网络活动。我们列出了三个主题，但网络参与者将有机会在上述框架内开发其他主题（甚至修改或定制现有主题）。我们将主题确定为：（i）互联网安全，（ii）可用的安全性，以及（iii）云。到目前为止，我们已经确定了三个用户群体：（i）受害者，（ii）执法人员，以及（iii）中小企业，企业和组织。我们希望这些最终用户参与每个主题。

The complicated interworking of players/parties and technology, embedded in society's legal and cultural context, implies that cybercrime research should consists of (and preferably integrate) multiple disciplines: it must understand the 'business' case behind the crime, the associated legal complexities in cyber space, the social and psychological enablers, the means and effectiveness of deterrence, the technology of the cyber systems, as well as the intricate relation between all of these. As a consequence, the Network aims to be highly interdisciplinary, bringing together researchers from all the mentioned disciplines, with roughly equal emphasis on technologists (computer scientists, engineers) and non-technologists (lawyers, social scientists and psychologists).Technology-wise, the Network aims to help in the coordination of 'practical security' or 'applied security' (for lack of better terms) research. Practical and applied security research thrives best if it is done in collaboration with the parties that eventually are targeted to use the research results. Interaction between researchers and end users is useful in the design stage (from requirements capturing to more 'intimate' user- and experience- driven design), in the development stage (through continuous feedback) and in the technology transfer stage. The Network proposes innovative ways to get researchers and end users together (professionally run workshop, actors for role playing, etc.), and encourages and supports its members to innovate in the ways it interacts with end users. The programme of networking is defined in two dimensions: time and space, as follows:- In 'time', we identify a first phase (18 months nominally) to initiate interaction and a second phase (also 18 months as a first estimate) to deliver results that help future research. In the first 18 months, the idea is to organise workshops and other events that bring together researchers and end users in order to understand the challenges faced in tackling cybercrime fully and to develop sound solutions. To achieve this, we will indeed need to put the emphasis on the end users in the first stage. The second 18 months will carry out consolidated workshops based on the lessons learnt in the first 18 months, and the emphasis will be shifted towards research and the establishment of research proposals and new networks, among others.- In 'space', the Network will have a number of Themes, each with its own leader and set of networking activities. We predefine three Themes to kick things off, but Network participants will have the opportunity to develop additional Themes (or even modify or tailor the existing ones) within the above framework. We identify the Themes as: (i) Internet safety, (ii) usable security, and (iii) cloud. The three user groups that we have identified so far are (i) victims, (ii) law enforcement, and (iii) SMEs, enterprises and organisation. We expect involvement of these end users in each Theme.