Measuring the cost of cybercrime

The Economics of Information Security and Privacy

Volumn , Issue , 2013, Pages 265-300

  Anderson, Ross ^a   Barton, Chris ^b   Böhme, Rainer ^c   Clayton, Richard ^a   van Eeten, Michel J G ^d   Levi, Michael ^e   Moore, Tyler ^f   Savage, Stefan ^g  

^a UNIVERSITY OF CAMBRIDGE   (United Kingdom)

^b Cloudmark Inc   (United Kingdom)

^c UNIVERSITY OF MÜNSTER   (Germany)

^d DELFT UNIVERSITY OF TECHNOLOGY   (Netherlands)

^e CARDIFF UNIVERSITY   (United Kingdom)

^f Southern Methodist University   (United States)

^g UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BOTNET; COMPUTER CRIME; COST ACCOUNTING; COSTS; ECONOMICS; MALWARE;

CREDIT CARD FRAUDS; CYBER CRIMINALS; DISPROPORTIONATE COSTS; INDIRECT COSTS; MODUS OPERANDI; SPAM PREVENTIONS; SYSTEMATIC STUDY; UK MINISTRY OF DEFENCE;

CRIME;

EID: 84898033338     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1007/978-3-642-39498-0_12     Document Type: Chapter

References (60)

1. Alvarez, L.: With personal data in hand, thieves file early and often. The New York Times. http://www.nytimes.com/2012/05/27/us/id-thieves-loot-tax-checks-filing-early-and-often. html (2012)
2. Anderson, R., Böhme, R., Clayton, R., Moore, T.: Security economics and the internal market. http://www.enisa.europa.eu/act/sr/reports/econ-sec/economics-sec (2008)
3. Brynjolfsson, E., Saunders, A.: Wired for Innovation: How Information Technology Is Reshaping the Economy. MIT, Cambridge (2009)
4. Bushnell, T.: How Google developers use Ubuntu. http://www.ubuntuvibes.com/2012/05/howgoogle-developers-use-ubuntu.html (2012)
5. Caballero, J., Grier, C., Kreibich, C., Paxson, V.: Measuring pay-per-install: the commoditisation of malware distribution. In: Proceedings of the 20th USENIX Conference on Security, SEC’11, Berkeley. USENIX Association (2011)
6. Canalys Inc.: Enterprise security market to exceed $22 billion in 2012. http://www.canalys. com/static/press_release/2011/canalys-press-release-201211-enterprise-security-marketexceed-22-billion-2012.pdf (2011)
7. Communications Fraud Control Association: 2011 Global fraud loss survey. http://www.cfca. org/fraudlosssurvey/(2011)
8. Consumers Union: State of the ‘net’ survey ’07. Consum. Rep. 9, 28-34 (2007)
9. Detica and Office of Cyber Security and Information Assurance: The cost of cyber crime. http://www.cabinetoffice.gov.uk/resource-library/cost-of-cyber-crime (2011)
10. Eliot, C.: Kim Dotcom - pirate or enabler? http://www.nzherald.co.nz/auckland-region/news/article.cfm?l_id=117&objectid=10784190 (2012)
11. European Commission: Towards a general policy on the fight against cyber crime. COM(2007) 267 final. http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=COM:2007:0267:FIN:EN: PDF (2007)
12. Fallows, J.: Hacked! The Atlantic. http://www.theatlantic.com/magazine/archive/2011/11/hacked/8673/(2011)
13. Federal Bureau of Investigation: International cooperation disrupts multi-country cyber theft ring. Press release. http://www.fbi.gov/news/pressrel/press-releases/international-cooperationdisrupts-multi-country-cyber-theft-ring (2010)
14. Florêncio, D., Herley, C.: Evaluating a trial deployment of password re-use for phishing prevention. In: Cranor, L.F. (ed.) Proceedings of the Anti-phishing Working Groups 2nd Annual eCrime Researchers Summit, Pittsburgh, vol. 269, pp. 26-36, 4-5 Oct 2007. ACM (2007)
15. Florêncio, D., Herley, C.: Sex, lies and cyber-crime surveys. In: 10th Workshop on the Economics of Information Security, Fairfax (2011)
16. Foley, L., Barney, K., Foley, J., Leeii, J., Fergerson, J., Sarrel, M., Nelson, C., Frank, M.: Identity theft: the aftermath 2009. http://www.idtheftcenter.org/artman2/uploads/1/Aftermath_ 2009_20100520.pdf (2010)
17. Forrester Data: Consumer attitudes toward spam in six countries. http://www.bsacybersafety. com/files/Forrester_Consumer_Spam.pdf (2004)
18. Frost and Sullivan: Increasing security needs of enterprises to fuel growth in the world content filtering market. Press release. http://www.frost.com/prod/servlet/press-release.pag? Src=RSS&docid=84071018 (2006)
19. Gözenoglu, M., Morawe, R.: The German Anti-Botnet Advisory Center. Presentation at ‘Internet Security Days’, 13-15 Sept 2011, Brühl. http://www.internet-security-days.com/templates/downloads/session-2011/110913_Goezenoglu_Morawe_ABBZ.pdf (2011)
20. Herley, C., Florêncio, D.: Nobody sells gold for the price of silver: dishonesty, uncertainty and the underground economy. In: Proceedings (online) of theWorkshop on Economics of Information Security. http://research.microsoft.com/pubs/80034/nobodysellsgoldforthepriceofsilver. pdf (2009)
21. Home Office: The economic and social costs of crime against individuals and households 2003-2004. http://webarchive.nationalarchives.gov.uk/20110218135832/http://rds.homeoffice.gov.uk/rds/ecom_soc_cost.html (2005)
22. House of Lords European Union Committee: Stopping the carousel: missing trader fraud in the EU. 20th Report of Session 2006-2007 (2007)
23. Huygen, A., Rutten, P., Huveneers, S., Limonard, S., Poort, J., Leenheer, J., Janssen, K., van Eijk, N., Helberger, N.: Ups and downs - economic and cultural effects of file sharing on music, film and games. TNO report 34782 http://www.ivir.nl/publicaties/vaneijk/Ups_And_ Downs_authorised_translation.pdf (2009)
24. Innes, M.: Signal crimes and signal disorders: notes on deviance as communicative action. Br. J. Sociol. 55, 335-355 (2004)
25. Institute for the Prevention of Crime: Cost of the criminal justice system. http://www. socialsciences.uottawa.ca/ipc/eng/cost_of_the_criminal_justice_system.asp (2012)
26. Irish, H.: Machine learning to classify fraudulent websites. 3rd Year Project Report, Computer Laboratory, University of Cambridge (2012)
27. Kalapesi, C., Willersdorf, S., Zwillenberg, P.: The connected kingdom: how the Internet is transforming the U.K. economy. http://www.connectedkingdom.co.uk/the-report (2010)
28. Kanich, C., Kreibich, C., Levchenko, K., Enright, B., Voelker, G.M., Paxson, V., Savage, S.: Spamalytics: an empirical analysis of spam marketing conversion. In: Proceedings of the ACM Conference on Computer and Communications Security, Alexandria (2008)
29. Kanich, C., Weaver, N., McCoy, D., Halvorson, T., Kreibich, C., Levchenko, K., Paxson, V., Voelker, G.M., Savage, S.: Show me the money: characterizing spam-advertised revenue. In: Proceedings of the USENIX Security Symposium, San Francisco (2011)
30. Khan, A., Hunt, J.: UK online fraud report 2012. http://forms.cybersource.com/forms/FraudReport2012UKUKwebwww2012 (2012)
31. Krebs, B.: SpamIt, Glavmed pharmacy networks exposed. Krebs on security blog. http://krebsonsecurity.com/2011/02/spamit-glavmed-pharmacy-networks-exposed/(2011)
32. Krebs, B.: Who’s behind the world’s largest spam botnet? Krebs on security blog. http://krebsonsecurity.com/2012/02/whos-behind-the-worlds-largest-spam-botnet/(2012)
33. Kuksov, D.: Buyer search costs and endogenous product design. Mark. Sci. 23(4), 490-499 (2004)
34. Leontiadis, N., Moore, T., Christin, N.: Measuring and analyzing search-redirection attacks in the illicit online prescription drug trade. In: Proceedings of the USENIX Security, San Francisco (2011)
35. Levchenko, K., Chachra, N., Enright, B., Felegyhazi, M., Grier, C., Halvorson, T., Kanich, C., Kreibich, C., Liu, H., McCoy, D., Pitsillidis, A., Weaver, N., Paxson, V., Voelker, G.M., Savage, S.: Click trajectories: end-to-end analysis of the spam value chain. In: Proceedings of the IEEE Symposium on Security and Privacy, Oakland (2011)
36. Levi, M.: Social reactions to white-collar crimes and their relationship to economic crises. In: Deflem, M. (ed.) Economic Crisis and Crime, pp. 87-105. The JAI Press/Emerald, London/Bingley (2011)
37. Levi, M., Burrows, J.: Measuring the impact of fraud in the UK: a conceptual and empirical journey. Br. J. Criminol. 48, 293-318 (2008)
38. Leyden, J.: Russian bookmaker hackers jailed for eight years. http://www.theregister.co.uk/2006/10/04/russian_bookmaker_hackers_jailed/(2006)
39. Lieber, E., Syverson, C.: Online vs. Offline Competition. In: Peitz, M., Waldfogel, J. (eds.) The Oxford Handbook of the Digital Economy. Oxford University Press, New York (2012)
40. M86 Security Labs: Canadian pharmacy no longer king. http://www.m86security.com/labs/traceitem.asp?article=1316 (2010)
41. McCoy, D., Pitsillidis, A., Jordan, G., Waver, N., Kreibich, C., Krebs, B., Voelker, G.M., Savage, S., Levchenko, K.: PharmaLeaks: understanding the business of online pharmaceutical affiliate programs. In: Proceedings of the USENIX Security Symposium, Bellevue (2012)
42. Microsoft Inc.: Microsoft security intelligence report, vol. 10 (2010). http://www.microsoft. com/security/sir/
43. Microsoft Inc.: Microsoft security intelligence report, vol. 9 (2010). http://www.microsoft. com/security/sir/
44. Moore, T., Clayton, R.: Examining the impact of website take-down on phishing. In: Cranor, L.F. (ed.) Proceedings of the Anti-Phishing Working Groups 2nd Annual eCrime Researchers Summit, Pittsburgh, vol. 269, pp. 1-13, 4-5 Oct 2007. ACM (2007)
45. Moore, T., Clayton, R., Anderson, R.: The economics of online crime. J. Econ. Perspect. 23(3), 3-20 (2009)
46. National Commission on Terrorist Attacks Upon the United States: The 9/11 Commission Report: Final Report of the National Commission on Terrorist Attacks upon the United States. W.W. Norton, New York (2004)
47. Oberholzer-Gee, F., Strumpf, K.: File-sharing and copyright. Harvard Business School Working Paper 09-132. http://www.hbs.edu/research/pdf/09-132.pdf (2009)
48. Peel, M.: Nigeria-Related Financial Crime and its links with Britain. Chatham House Report, London (2006)
49. Samosseiko, D.: The Partnerka - What is it, and why should you care? In: Proceedings of the Virus Bulletin Conference, Geneva (2009)
50. Snow, G.: Cyber security: threats to the financial sector. Testimony before the House Financial Services Committee. http://financialservices.house.gov/UploadedFiles/091411snow. pdf (2011)
51. Stiglitz, J.E., Bilmes, L.J.: The Three Trillion Dollar War: The True Cost of the Iraq Conflict. W.W. Norton, New York (2008)
52. Stone-Gross, B., Abman, R., Kemmerer, R.A., Kruegel, C., Steigerwald, D.G., Vigna, G.: The underground economy of fake antivirus software. In: 10th Workshop on the Economics of Information Security, Fairfax (2011)
53. Symantec: MessageLabs Intelligence Report. http://www.symanteccloud.com/mlireport/MLI_ 2010_06_June_FINAL.pdf (2010)
54. Taylor, J.: Overseas cyber-crimewave taking £600 million a year from the taxman. The Independent (2011). http://www.independent.co.uk/news/uk/crime/overseas-cybercrimewavetaking-600m-a-year-from-thetaxman-6271552.html
55. Van Eeten, M., Bauer, J.M.: Economics of malware: Security decisions, incentives and externalities. Tech. Rep. OECD STI Working Paper 2008/1, OECD, Paris. http://www.oecd. org/dataoecd/53/17/40722462.pdf (2008)
56. Van Eeten, M., Bauer, J.M., Asghari, H., Tabatabaie, S.: The role of Internet service providers in Botnet mitigation: an empirical analysis based on spam data. Tech. Rep. s0 STI Working Paper 2010/5, OECD, Paris. http://www.oecd.org/officialdocuments/publicdisplaydocumentpdf/?cote=DSTI/DOC(2010)5&docLanguage=En (2010)
57. Van Eeten, M., Asghari, H., Bauer, J.M., Tabatabaie, S.: Internet service providers and Botnet Mitigation: a fact-finding study on the Dutch market. The Hague: Ministry of Economic Affairs. http://www.rijksoverheid.nl/documenten-en-publicaties/rapporten/2011/01/13/internet-service-providers-and-botnet-mitigation.html (2011)
58. Vancouver Sun: Online drugs can prove deadly: Coroner. http://www.canada.com/vancouversun/news/story.html?id=ddadbf8a-bdac-45c4-a566-36acd8ffd72b (2007)
59. Wondracek, G., Holz, T., Platzer, C., Kirda, E., Kruegel, C.: Is the Internet for porn? An insight into the online adult industry. In: Proceedings (online) of the 9th Workshop on Economics of Information Security, Cambridge http://weis2010.econinfosec.org/papers/session2/weis2010_ wondracek.pdf (2010)
60. Zittrain, J.: The Future of the Internet: And How to Stop It. Allen Lane, London (2008)