A Data Analytics Approach to the Cybercrime Underground Economy

INTRODUCTION OF THE PROJECT

Despite the rapid escalation of cyber threats, there has still been little research into the foundations of the topic or methodologies that would serve to guide information systems researchers and practitioners who affect cybersecurity. additionally , little is understood about crime-as-a-service (CaaS), a criminal business model that underpins the cybercrime underground. This research gap and therefore the practical cybercrime problems we face have motivated us to research the cybercrime underground economy by taking a knowledge analytics approach from a design science perspective. to realize this goal, we: propose a knowledge analysis framework for analyzing the cybercrime underground; propose CaaS and crimeware denitions; propose an associated classication model, and develop an example application to demonstrate how the proposed framework and classication model might be implemented in practice. We then use this application to research the cybercrime underground economy by analyzing an outsized data set obtained from the web hacking community. By taking a design science research approach, this paper contributes to the planning artifacts, foundations, and methodologies during this area. Moreover, it provides useful practical insights to practitioners by suggesting guidelines on how governments and organizations altogether industries can steel oneself against attacks by the cybercrime underground.

EXISTING SYSTEM

The economics of an online crime has newly developed into a field of controlling black money. This economic approach not only provides estimated technique of analyzing internet crimes but also gives details to analyzers of system dependability and divergence. the prevailing system will highlight on the topic of online crime, which has formed its industry since.

It all started from amateur hackers who cracked websites and wrote malicious software in pursuit of fun or achieving limited objectives to professional hacking. within the past days, electronic fraud was main objective but now it's been become electronic hacking. This study focuses the difficulty through an economic analysis of obtainable web forum to deals in malware and personal information.

The findings of this survey research provide considerable in-depth sight into the functions of malware economy spinning around computer impositions and compromise. during this regard, the survey research paper may benefit particularly computer security officials, the enforcement agencies, and generally prospective anyone involved in better understanding cybercrime from the offender standpoint.

Disadvantages

• there's no more data Security thanks to lack of Attacker Prevention methods.
• There are not any Classification of Crimeware Services and Products.

PROPOSED SYSTEM

Within the proposed system there are two sorts of product or service are available within the cybercrime underground. the primary are often either CaaS or crimeware that are associated with attack strategy, for instance , phishing, brute force, or DDoS attacks, or are often used for spamming or creating botnets, exploits, ransomware, rootkits, or Trojans. Attack strategies often exploit system vulnerabilities like application loopholes. additionally , social engineering attacks exploit human vulnerabilities.

The foremost well-known example of such an attack is that the use of a ``secret question'' for password recovery: attackers check the user's background to guess the key question and hence steal the account. However, because social engineering is one among the oldest account hacking techniques, most account holders are now conscious of it. additionally , social engineering-related products and services are rarely traded underground, although a couple of sellers are known to sell tutorials. As a result, we've not included ``social engineering services'' as a CaaS type.

The second sort of product or service available neutralizes organizations' preventive measures, like anti-virus programs. These are supported programs designed to evade anti-virus software to either cause mischief or be left behind for later activation. Examples include encryption and virtual private network (VPN) services, crypters, and proxies.

Advantages

• The system propose a knowledge analysis framework for analyzing the cybercrime underground
• The system proposes CaaS and crimeware definitions
• The system proposes an associated classification model, Develop an example application to demonstrate how the proposed framework and classification model might be implemented in practice. The system then uses this application to research the cybercrime underground economy by analyzing an outsized data set obtained from the web hacking community.