DOCSLIB.ORG

Exploring Threats and Vulnerabilities in Hacker Web Forums, IRC And

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Exploring Threats and Vulnerabilities in Hacker Web Forums, IRC And Exploring Threats and Vulnerabilities in Hacker Web: Forums, IRC and Carding Shops Victor Benjamin1, Weifeng Li1, Thomas Holt2, Hsinchun Chen1 1Department of Management Information Systems 2School of Criminal Justice The University of Arizona Michigan State University Tucson, AZ 85721 East Lansing, MI, 48824 {vabenji, weifengli}@email.arizona.edu, [email protected] [email protected] Abstract— Cybersecurity is a problem of growing thwart existing security threats. Conversely, very little work relevance that impacts all facets of society. As a result, has been done to go beyond technological issues and instead many researchers have become interested in studying focus investigation on the human element behind cybercrime. cybercriminals and online hacker communities in order to For example, much is unknown concerning hacker behaviors, develop more effective cyber defenses. In particular, the cybercriminal supply chain, underground hacker analysis of hacker community contents may reveal existing communities, etc. Specifically, the development of methods to and emerging threats that pose great risk to individuals, model cyber adversaries is one of the critical but unfulfilled businesses, and government. Thus, we are interested in research need outlined in a 2011 report on cybersecurity by the developing an automated methodology for identifying National Science and Technology Council [1]. More research identify tangible and verifiable evidence of potential on “black hat hackers”, i.e., cybercriminals, would offer new threats within hacker forums, IRC channels, and carding knowledge on securing cyberspace against those with shops. To identify threats, we couple machine learning malicious intent, leading to the development of more effective methodology with information retrieval techniques. Our countermeasures against security threats [2]. approach allows us to distill potential threats from the In particular, analysis of hacker community contents may entirety of collected hacker contents. We present several reveal existing and emerging threats that pose great risk to examples of identified threats found through our analysis individuals, businesses, and government. Thus we are techniques. Results suggest that hacker communities can motivated to develop automated methods for identifying, be analyzed to aid in cyber threat detection, thus providing collecting, and analyzing hacker community contents in search promising direction for future work. of threats and vulnerabilities. Such a capability to extract Keywords - Cyber security, Hacker forums, Hacker IRC, tangible and verifiable evidence of threats would be of great Carding shops, Threats, Vulnerabilities asset to the security community. I. INTRODUCTION II. LITERATURE REVIEW Over the past decade a growing amount of critical We focus our literature review on previous hacker infrastructures have begun to rely on computer and community studies, as past work provides context and helps information technologies in order to meet increasingly guide the formulation of this research. In particular, we review complex demands. While use of technology has helped research concerning three key types of hacker communities: achieve more advanced capabilities within infrastructure, an (1) hacker forums, (2) hacker Internet-Relay-Chat (IRC), and unfortunate consequence is that many of such systems are (3) carding shops. These community types contain their own facing growing exposure and risk to cyber-attack. To further unique data that may aid in the identification of threats and exacerbate the issue, advancing technologies are enabling vulnerabilities. hackers to commit cybercrime at a much greater scale now than in the past. The sheer number of emerging security Hacker Forums threats necessitates further research and development for Hackers make extensive use of online communities such as mitigating risk and exposure to vulnerabilities. As a result, forums to support cybercriminal activity. Primarily, researchers and practitioners have taken an increased interest participants in such forums openly disseminate tacit in advancing current cybersecurity capabilities. knowledge and share tools much like a legitimate electronic Traditional research in the security domain has often network-of-practice. Hacking tools, malware samples, source focused on improving security built directly into computing code, etc. are often freely distributed among forum and networking. Often times this stream of research focuses participants by simply attaching them to posted messages [3, scrutiny on vulnerabilities at the protocol and system levels, 4]. Additionally, knowledge and methodology is disseminated where incremental advancements can be made in order to among hackers in the form of tutorials written as text files or embedded in images, and even instructional videos [5]. Many IEEE Intelligence and Security Informatics 2015, Under Review 1 of these tutorials directly enable readers to launch two platforms also leads into differences concerning ease of cybercriminal attacks such as denial of service attacks, SQL identification; content shared on web forums can be indexed injections, cross-scripting attacks, and more. by search engines, while IRC channel contents are excluded. For this reason, researchers attempting to identify hacker In general, a wealth of cybercriminal knowledge is communities for study are more likely to come across hacker distributed among hacker forum participants, with many forums than IRC channels. individuals advancing their capabilities to commit cybercrime by utilizing such resources. It is very feasible for an individual Methods to identify and collect hacker IRC channels have with little to no hacking skills to gain knowledge and been developed in previous studies. The major identification capability by simply visiting different hacker communities and techniques used in hacker community research appear to consuming their contents. Research identifies the existence of revolve around keyword searches and scrutinizing known such hacker communities to be common across various communities for hyperlinks and references to other potential geopolitical regions, including the US, China, Russia, the hacker communities [3, 11]. Some hacker IRC can be Middle-East, and other regions where information identified as a result of this process. After identification, steps technologies are either ubiquitous or growing rapidly in use can be taken to collect data. Specialized IRC listener programs [6][7]. This presents a growing problem of global significance. can be developed to utilize the IRC protocol and sit-in on Research in this area has potential for high-impact on society. known hacker IRC channels [3, 7]. The listener programs can passively log all data transmitted between channel Unfortunately, hacker forum data is often difficult and participants. nontrivial to collect. Many hacker communities employ anti- Carding Shops crawling features, such as bandwidth monitoring, paywalls, restricted access based on forum tenure / reputation Carding shops are another important part of the global requirements, invitation-based access, and CAPTCHA images hacker and cybercriminal community. Carding shops help / verification codes to mitigate automated bot activity [3, 8, 9]. facilitate cyber carding crimes as they provide a supply chain Additionally, there is potential for such forums to carry for carders who wish to sell stolen cards. Unfortunately, there malware intended to infect visitors, as many cybercriminal- is very little academic literature concerning carding shops related web pages may be scripted to attempt exploitation of despite their importance. web browser vulnerabilities [10]. Such exploits could allow Monitoring carding shops can allow card issuers and remote attacks to arbitrarily execute code on vulnerable others to mitigate associated risks or losses by taking machines, which is of concern to researchers and practitioners. precautions at early stages. By leveraging stolen cards’ Unlike many normal web contents, a strategic and security- metadata, we can infer useful information that allows us to minded approach must be considered when designing methods identify emerging targets or victims [12]. In this research, we to automatically collect data from hacker forums. aim to identify emerging threats and targets and provide Hacker IRC actionable intelligence for cybersecurity decision makers. To this end, carding shop data is of importance to our goals. As indicated previously, hacker communities commonly exist as Internet forums. However, they may also exist as III. TECHNICAL APPROACH Internet-Relay-Chat (IRC) channels. Unlike forums which can Different methodologies must be employed for collecting be accessed through a typical web browser, IRC exists on a and analyzing hacker contents from forums, IRC, and carding separate protocol and can support real-time, synchronous chat shops. Each platform has its own intricacies that require among thousands of users simultaneously. Hackers commonly different strategies for research. We provide details of our use IRC for real-time communication, as forums are more work in regards to each type of hacker community. slow-paced. An IRC-specific client is needed to connect to IRC servers that host multiple channels open for participants Forums to make use of. Each participant can choose to join one or We propose the development of an information retrieval many channels. Additionally, IRC messages are broadcast to framework for identifying emerging threats
Load more

Recommended publications
  • Cyber Crime the Threat to Small and Medium Sized Businesses Cyber Crime: What Does It Mean for You?
    Cyber Crime The threat to small and medium sized businesses Cyber Crime: What does it mean for you? Technology is at the core of our cyber criminals to gain control over It’s critical that you are up-to-speed everyday lives, so much so that for the computer systems of a large on what criminals are doing and – many of us it’s difficult to remember entertainment corporation while more importantly – what you can a time without mobile phones, hackers were able to gain access do to minimise the likelihood of computers, email and the internet. to millions of a global eCommerce becoming the victim of these types company’s customer records. of attacks. To that end, we also focus These innovations have changed the on educating our customers, which is way we connect with one another, What might be surprising, however, why, in addition to online resources1 both on a personal and business is that in their most recent Internet we’ve developed this overview to level. Technology has played a key Security Threat Report, Symantec give you a snapshot of the cyber role in how the world economy found that 60% of all targeted crime landscape in general, as well has evolved over the course of attacks were levelled against as in terms of specific threats to the last decade, but it’s also given small and medium-sized (SME) small and medium sized businesses criminals new tools for gaining businesses. One reason for this is like yours. In the pages that follow access to information and funds.
    [Show full text]
  • Chapter 2 the Hacker Group R
    Chapter 2 The hacker group R. Gevers CHAPTER OUTLINE Introduction 15 The hacker as social reformer 16 The hacker as combatant 17 The hacker group 19 Disciplines 20 Conclusions 39 n INTRODUCTION Since the information revolution the Internet has been a driving force behind many—if not most—social reforms. From the 1% marches to the Arab Spring: The Internet was used to fuel, coordinate, and facilitate protests. The Internet turned out to be a safe haven for liberal thinkers and was used to establish contacts with other like-minded individuals at the other end of the globe. The global nature of the Internet makes (targeted) communica- tion accessible to anyone. This was at the core of many great revelations: WikiLeaks being the first, The Intercept and Edward Snowden following quickly. In the early days the Internet was a safe haven for free thinkers; there was no censorship and no laws were directly applicable. This opened up opportuni- ties on the Internet to influence governments and their laws. However, this situation has changed: The Internet has become securitized and militarized. Whereas the Internet used to be a place aimed at free and unhindered flow of information and ideas, now it is increasingly influenced by State actors and large non-State actors. Whereas any individual could tread onto the Internet and fight for a cause, nowadays you need to tread carefully. 15 Cyber Guerilla Copyright © 2016 Elsevier Inc. All rights reserved. 16 CHAPTER 2 The hacker group Chapter 1 has described the essence of cyber guerilla strategy, tactics, and the concepts of favorable and unfavorable terrain.
    [Show full text]
  • Security/Auditing & Control of Information Systems
    Instructor: Kevin Robertson Security/Auditing & Control of Information Systems Lecture Outline 13 Principles and Learning Objectives Define computer crime, and list several types of computer crime Understand typical threats and patterns Understand the need for Auditing and Control of Information Systems 2 Information Technology and Security 3 General IT Security Businesses must protect against the unknown. New methods of attacking networks and Web sites and new network security holes are being constantly discovered or invented. An organization cannot expect to achieve perfect security for its network and Web site How is the data protected once it is delivered to the Business? How are credit card transactions authenticated and authorized? The biggest potential security problem in an organization is of human, rather than electronic, origin. The weakest link in any security system is the user 4 Insider Attacks Employees are the most-cited culprits of incidents Percentage of respondents that point the finger at current employees jumped over 10% in one year (2013-14) 5 Why Computer Incidents Are So Prevalent Increasing Complexity Increases Vulnerability Cloud computing, networks, computers, mobile devices, virtualization, OS applications, Web sites, switches, routers, and gateways are interconnected and driven by millions of lines of code Higher Computer User Expectations Computer help desks are under intense pressure to respond very quickly to users’ questions Expanding and Changing Systems Introduce New Risks It is difficult
    [Show full text]
  • Hacker, Hoaxer, Whistleblower, Spy: the Story of Anonymous
    hacker, hoaxer, whistleblower, spy hacker, hoaxer, whistleblower, spy the many faces of anonymous Gabriella Coleman London • New York First published by Verso 2014 © Gabriella Coleman 2014 The partial or total reproduction of this publication, in electronic form or otherwise, is consented to for noncommercial purposes, provided that the original copyright notice and this notice are included and the publisher and the source are clearly acknowledged. Any reproduction or use of all or a portion of this publication in exchange for financial consideration of any kind is prohibited without permission in writing from the publisher. The moral rights of the author have been asserted 1 3 5 7 9 10 8 6 4 2 Verso UK: 6 Meard Street, London W1F 0EG US: 20 Jay Street, Suite 1010, Brooklyn, NY 11201 www.versobooks.com Verso is the imprint of New Left Books ISBN-13: 978-1-78168-583-9 eISBN-13: 978-1-78168-584-6 (US) eISBN-13: 978-1-78168-689-8 (UK) British Library Cataloguing in Publication Data A catalogue record for this book is available from the British library Library of Congress Cataloging-in-Publication Data A catalog record for this book is available from the library of congress Typeset in Sabon by MJ & N Gavan, Truro, Cornwall Printed in the US by Maple Press Printed and bound in the UK by CPI Group Ltd, Croydon, CR0 4YY I dedicate this book to the legions behind Anonymous— those who have donned the mask in the past, those who still dare to take a stand today, and those who will surely rise again in the future.
    [Show full text]
  • Security News Digest August 22, 2017
    Security News Digest August 22, 2017 Relax and Take Dog Days of Summer quiz Beware Phony iCloud Hacking Calls https://www.bbb.org/vancouver-island/news-centre/bbb-scam-alerts/2017/08/beware-phony-icloud-hacking-calls/ [Aug17] Have an Apple device and iCloud account? Don’t let this new scam fool you. Con artists are calling people across the United States and Canada and claiming that their iCloud accounts have been hacked. BBB [Better Business Bureau] Scam Tracker has gotten numerous reports of this scam in the past few weeks, and some targets say they’ve gotten 10 or more calls a day! How the Scam Works: You get a robocall claiming to be from Apple Support. Your Caller ID may say “Apple Inc.” or the name of your local Apple store. The message informs you that your iCloud account was hacked and prompts you to stay on the line and speak to an Apple support “technician.” If you stay on the line, this “technician” will offer to fix your account. But first, they will need remote access to your computer. Unfortunately, allowing a scammer to access your computer can open you up to the risk of identity theft. Scam artists can install malware that records passwords or hunts for personal information, such as bank account numbers, on your computer. Protect yourself from tech support scams: (1) Don’t ever give a stranger remote access to your machine: Granting someone remote access to your computer permits them to install malware and access your files. Don’t do it! (2) Don’t believe Caller ID: Victims report falling for this scam because the calls appear to come from Apple Support.
    [Show full text]
  • Identifying Patterns in Informal Sources of Security Information
    Identifying Patterns in Informal Sources of Security Information Emilee Rader Rick Wash Michigan State University Michigan State University [email protected] [email protected] Abstract Computer users have access to computer security information from many different sources, but few people receive explicit computer security training. Despite this lack of formal educa- tion, users regularly make many important security decisions, such as “Should I click on this potentially shady link?” or “Should I enter my password into this form?” For these decisions, much knowledge comes from incidental and informal learning. To better understand differences in the security-related information available to users for such learning, we compared three in- formal sources of computer security information: news articles, web pages containing computer security advice, and stories about the experiences of friends and family. Using an LDA topic model, we found that security information from peers usually focuses on who conducts attacks, information containing expertise focuses instead on how attacks are conducted, and informa- tion from the news focuses on the consequences of attacks. These differences may prevent users from understanding the persistence and frequency of seemingly mundane threats (viruses, phishing), or from associating protective measures with the generalized threats the users are concerned about (hackers). Our findings highlight the potential for sources of informal security education to create patterns in user knowledge that affect their ability to make good security decisions. 1 Introduction Cybersecurity has a people problem. A large number of the exploited vulnerabilities in computing systems involve users of those systems making bad choices. For example, Anderson [3] found that the majority of security issues with automated banking machines are due to users making incorrect or inappropriate decisions.
    [Show full text]
  • Court Reverses Conviction of US 'Security Hacker' (Update) 11 April 2014
    Court reverses conviction of US 'security hacker' (Update) 11 April 2014 we find it necessary to reach only one that has been fundamental since our country's founding: venue," the appellate court in Philadelphia said. The appeals panel agreed with the defense that the case could not be brought in New Jersey against Auernheimer because "neither he nor (his co- defendant) was ever in New Jersey while allegedly committing the crime, and... the servers accessed were not in New Jersey." Supporters have said that Auernheimer was merely pointing out a security issue and did not harm anyone. Prosecutors contended that the argument that he was trying to make the Internet more secure A man attends a hacking challenge in Paris on March was "fiction." 16, 2013 Auernheimer and co-defendant Daniel Spitler—he had pleaded guilty in a separate trial—were said to be members of Goatse Security, a loose An appeals court in the United States overturned association of Internet hackers who hunt for Friday the conviction of a self-described "security security flaws. research" hacker for breaking into the AT&T online network to reveal a security flaw. Using a script called an "iPad 3G Account Slurper," the Goatse hackers managed to obtain the number Andrew Auernheimer, known online as "weev," used to identify a subscriber on AT&T's network. was sentenced to just over three years in prison last year for breaching the AT&T network and "We're thrilled that the Third Circuit reversed Mr. revealing email addresses of more than 120,000 Auernheimer's conviction," said attorney Hanni Apple iPad users to the online news site Gawker.
    [Show full text]
  • Introduction to Cybersecurity 4
    First Edition: MAJ THOMAS A. OWENS, CAP 2019 Revision: MAJ DEREK RUSTVOLD, CAP DIRECTOR OF CYBER PROGRAMS, MID-ATLANTIC REGION Editing: SUSAN MALLETT, CAP NHQ DR. JEFF MONTGOMERY, CAP NHQ Published by NATIONAL HEADQUARTERS CIVIL AIR PATROL AEROSPACE EDUCATION DIRECTORATE MAXWELL AFB, ALABAMA 36112 REVISED SEPTEMBER 2019 Contents AN INTRODUCTION TO CYBERSECURITY 4 CAP Cybersecurity Module 4 Summary of Recent Attacks and Motivation for Action 5 Activity Group One: Codes, Ciphers and Encryption Awareness 8 Unit Profile: Room 40 and Bletchley Park 15 Biography: Alan Turing 15 CONCEPTS IN INFORMATION ASSURANCE AND CYBER WARFARE 16 Activity Group Two: Vulnerabilities and Basic Defense Skills 19 Patriot Bio: Maj. Gen. Robert J. Skinner 25 CONCEPTS OF OPERATING SYSTEMS AND NETWORKING 26 Activity Group Three: Basic Probing Skills 27 th Unit Profile: 24 Air Force 38 th Unit Profile: 67 Network Warfare Wing 38 Patriot Bio: Brig. Gen. Kevin B. Wooton 38 EXPLORING CAREERS IN CYBERSECURITY 39 Unit Profile: USCYBERCOM 43 Patriot Bio: General Keith B. Alexander 43 Bonus Graphic: USCYBERCOM 44 CONCLUSION AND NEXT STEPS 45 APPENDICES 51 A: Motivational Chronology of Cyber Warfare 51 B: Glossary of Terms, Threats, and Countermeasures 55 C: Toolbox of Promotional Resources 68 D: Toolbox of Technical Resources 72 E. Solutions to Module Activities 74 3 An Introduction to Cybersecurity Our Nation's Cyber Dependency At all its various levels, the United States has become a “cybernation.” Aviators will be amused to discover the prefix “cyber-” is derived from the word cybernetic, which comes from a Greek word κυβερνητικός (kybernētēs) which means pilot, rudder, steersman, or governor.
    [Show full text]
  • Victims of Cybercrime in Europe: a Review of Victim Surveys Carin M
    Reep‑van den Bergh and Junger Crime Sci (2018) 7:5 https://doi.org/10.1186/s40163-018-0079-3 RESEARCH Open Access Victims of cybercrime in Europe: a review of victim surveys Carin M. M. Reep‑van den Bergh1 and Marianne Junger2* Abstract Objectives: Review the evidence provided by victim surveys in order to provide a rough estimate of the personal crime prevalence of the main types of cybercrime. Methods: We performed a search in databases, searched online, and contacted several Ofces for National Statistics in Europe and selected surveys that provided information about individual victims of crime which were representative for a general population. Six types of cybercrime have been distinguished, namely online shopping fraud, online fraud banking/payment, other cyber fraud (such as advanced fee fraud), cyber threats/harassment, malware, and hacking. For every survey the questions on cybercrime are presented and the crime prevalence estimates are compared. Results: Nine surveys were included. Annual crime prevalence rates ranged from 1 to 3% for online shopping fraud, from less than 1 to 2% for online banking/payment fraud. Less than 1% of the population is a victim of other types of fraud and a maximum of 3% of the population experiences some sort of online bullying such as stalking (1%) or threatening (1%). 1–6% is a victim of hacking. The estimates for being a victim of malware range from 2 to 15%. For all ofences it cannot be estimated how much of the diferences are due to variation in methods and questioning between the studies or real diferences between countries or change over time.
    [Show full text]
  • To View It Click Here
    Digital Social Engineering Attacks 1 Digital Social Engineering Attacks 10/10/18 Christopher Hovis East Carolina University Digital Social Engineering Attacks 2 Digital Social Engineering Attacks 3 ABSTRACT This paper will look at how social engineers exploit human vulnerabilities through digital social engineering attacks and how those attacks can affect the confidentiality, integrity, and accessibility of information and computer systems. Social engineering attacks are propagated by malicious links, spoofing websites, SMS text, or pop-up windows that ask for sensitive information or infect the target’s computer with malware for use in a later attack. This paper will define the types of human vulnerabilities that are exploited during a social engineering attack and define and discuss the most used attack techniques that are carried out by social engineers in the attempt to collect a target’s information, gain access to their systems, or prevent them from accessing their systems or devices. Digital Social Engineering Attacks 4 INTRODUCTION Cyber-attacks have been increasing rapidly over the past decade (Conteh & Schmick, 2016). The impact of cyber-attacks and cyber-crime have reached the point that in 2013, the then director of the FBI James Comey, testified to the Senate Homeland Security Committee that cyber-attacks have surpassed terrorism as the leading domestic threat to the United States (Conteh & Schmick, 2016). One of the most used cyber-attacks is social engineering. According to the website social- engineer.org, roughly 66% of all cyber-attacks use some form of social engineering to execute the attack (Social-Engineer.Org, 2014). So, what is social engineering? According to Christopher Hadnagy, a professional social engineer and author, social engineering is “any act that influences a person to take an action that may or may not be in their best interest” (Hadnagy, 2014).
    [Show full text]
  • Cyber-Conflict, Cyber-Crime, and Cyber-Espionage
    Scholarship Repository University of Minnesota Law School Articles Faculty Scholarship 2013 Cyber-Conflict, Cyber-Crime, and Cyber-Espionage David Weissbrodt University of Minnesota Law School, [email protected] Follow this and additional works at: https://scholarship.law.umn.edu/faculty_articles Part of the Law Commons Recommended Citation David Weissbrodt, Cyber-Conflict, Cyber-Crime, and Cyber-Espionage, 22 MINN. J. INT'L L. 347 (2013), available at https://scholarship.law.umn.edu/faculty_articles/223. This Article is brought to you for free and open access by the University of Minnesota Law School. It has been accepted for inclusion in the Faculty Scholarship collection by an authorized administrator of the Scholarship Repository. For more information, please contact [email protected]. Article Cyber-Conflict, Cyber-Crime, and Cyber- Espionage David Weissbrodt* I. INTRODUCTION Computers and the Internet have changed and are continuing to change the way governments, militaries, businesses, and other organs of society manage their activities. While computers can improve efficiency, they are vulnerable to cyber-attack, cyber-crime, and cyber-espionage.1 The international community, states, and businesses are still adapting to the unique set of challenges posed by cyber-attack, cyber-crime, and cyber-espionage. States are creating military operations that specialize in cyber-attack and defense to adapt to these relatively new threats to national security operations. 2 * Regents Professor and Fredrikson & Byron Professor of Law, University of Minnesota Law School. The author thanks Quin Ryan for her assistance on this article. This Article was prepared for the Minnesota Journal of International Law's 2013 Symposium. To see a video recording of the discussion that took place, please see the Minnesota Journal of International Law's website, http://www.minnjil.org/?pageid=913.
    [Show full text]
  • Certificate in the Principles of Cyber Security Workbook 1
    NCFE Level 2 Certificate in the Principles of Cyber Security CYBER CRIME POTENTIAL THREATS ORGANISATIONAL STRATEGIES DATA MANAGEMENT LEGISLATION SAMPLE ETHICAL CONDUCT Workbook 1 How to use your learning materials This course is delivered on a flexible learning basis. This means that most of your study will take place away from your Assessor/Tutor. It helps to carefully plan your studying so that you get the most out of your course. We have put together some handy tips for you below. Study Guidance • Try to plan an outline timetable of when and where you will study. • Try to complete your work in a quiet environment where you are unlikely to be distracted. • Set realistic goals and deadlines for the various elements of your course. • Plan what you are going to study during each session, and try and achieve this each time. • After each session, reflect on what you have achieved and plan what you hope to complete next time. • Remember that not only do you have the support of your Assessor/Tutor, but it is likely that your family, friends and work colleagues will also be willing to help. Assessor/Tutor Support Your Assessor/Tutor will be available to support and guide you through the programme. They are experts in your area of study and are experienced in helping many different types of learners. They can help you to improve the standard of work you submit and will give you useful feedback on areas in which you have excelled, as well as where you can improve. Remember to listen to,SAMPLE or read, their feedback carefully.
    [Show full text]