DOCSLIB.ORG

Using Real-Time Monitoring to Gather Data on Online Predators

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Using Real-Time Monitoring to Gather Data on Online Predators A Criminological Analysis: Using Real-Time Monitoring to Gather Data on Online Predators Kasun Jayawardena, B.Jus Supervisor: Dr. Colin Thorne Submitted in fulfilment for the degree of Masters of Justice (Research) School of Justice Faculty of Law QUEENSLAND UNIVERSITY OF TECHNOLOGY Abstract The Internet presents a constantly evolving frontier for criminology and policing, especially in relation to online predators – paedophiles operating within the Internet for safer access to children, child pornography and networking opportunities with other online predators. The goals of this qualitative study are to undertake behavioural research – identify personality types and archetypes of online predators and compare and contrast them with behavioural profiles and other psychological research on offline paedophiles and sex offenders. It is also an endeavour to gather intelligence on the technological utilisation of online predators and conduct observational research on the social structures of online predator communities. These goals were achieved through the covert monitoring and logging of public activity within four Internet Relay Chat(rooms) (IRC) themed around child sexual abuse and which were located on the Undernet network. Five days of monitoring was conducted on these four chatrooms between Wednesday 1 to Sunday 5 April 2009; this raw data was collated and analysed. The analysis identified four personality types – the gentleman predator, the sadist, the businessman and the pretender – and eight archetypes consisting of the groomers, dealers, negotiators, roleplayers, networkers, chat requestors, posters and travellers. The characteristics and traits of these personality types and archetypes, which were extracted from the literature dealing with offline paedophiles and sex offenders, are detailed and contrasted against the online sexual predators identified within the chatrooms, revealing many similarities and interesting differences particularly with the businessman and pretender personality types. These personality types and archetypes were illustrated by selecting users who displayed the appropriate characteristics and tracking them through the four chatrooms, revealing intelligence data on the use of proxies servers – especially via the Tor software – and other security strategies such as Undernet’s host masking service. Name and age changes, which is used as a potential sexual grooming tactic was also revealed through the use of Analyst’s Notebook software and information on ISP information revealed the likelihood that many online predators were not using any safety mechanism and relying on the anonymity of the Internet. The activities of these online predators were analysed, especially in 2 regards to child sexual grooming and the ‘posting’ of child pornography, which revealed a few of the methods in which online predators utilised new Internet technologies to sexually groom and abuse children – using technologies such as instant messengers, webcams and microphones – as well as store and disseminate illegal materials on image sharing websites and peer-to-peer software such as Gigatribe. Analysis of the social structures of the chatrooms was also carried out and the community functions and characteristics of each chatroom explored. The findings of this research have indicated several opportunities for further research. As a result of this research, recommendations are given on policy, prevention and response strategies with regards to online predators. 3 Contents Chapter 1: Introduction ............................................................................................................. 13 Defining Child Sexual Abuse .................................................................................................... 16 Abusers and Online Predators ............................................................................................... 18 Legal Aspects ............................................................................................................................ 19 Child Sexual Abuse and Offenders ....................................................................................... 20 Chapter 2: Technology Used to Facilitate Child Sexual Abuse .............................................. 22 The Evolving Internet: Reimagining Old Technologies ........................................................... 22 Anonymity ............................................................................................................................. 23 Internet Relay Chat (IRC)...................................................................................................... 24 mIRC ..................................................................................................................................... 25 File servers and other add-on software .................................................................................. 25 File sharing software ............................................................................................................. 25 Image sharing ........................................................................................................................ 26 Transcript 1: Image Sharing of Child Pornography and Comments ................................ 26 Social networking .................................................................................................................. 26 Instant messengers ................................................................................................................. 26 Chapter 3: Theory and Practice of Paedophilia in the Internet Age ..................................... 28 Child Sexual Abuse and Abusers .............................................................................................. 29 Integrated Theory .................................................................................................................. 29 Quadripartite Model .............................................................................................................. 30 Pre-condition Model .............................................................................................................. 30 Pathways Model .................................................................................................................... 30 4 Profiling Abusers....................................................................................................................... 31 Behavioural and Psychological Research ................................................................................. 32 Communication ......................................................................................................................... 40 Anonymity ................................................................................................................................. 41 Organised Abuse ....................................................................................................................... 41 Knowledge Gaps ....................................................................................................................... 42 Behavioural Analysis and Profiling ....................................................................................... 42 Technological Utilisation ...................................................................................................... 42 Communication and Social Structure Analysis ..................................................................... 43 Previous Methods ...................................................................................................................... 43 The Need for Ongoing Primary Research ................................................................................. 45 Chapter 4: Research Methods ................................................................................................... 47 Design........................................................................................................................................ 47 Data Collection Procedure ........................................................................................................ 48 Internet Relay Chat Environment .......................................................................................... 48 Table 1: Logged Chatrooms .............................................................................................. 49 Method of Collection ............................................................................................................. 51 Setting Up of Monitoring ...................................................................................................... 52 Figure 1: Virtual Private Network ..................................................................................... 53 Internet Relay Chat Communication ..................................................................................... 54 Screenshot 1: mIRC Setup Options .................................................................................... 57 Transcript 2: Exits, Entrances and IP/ISP Information .................................................... 58 Transcript 3: Conversation, Advertisement and Fserver .................................................. 58 Sampling.................................................................................................................................... 60 5 Figure 2: Example of Whois .............................................................................................
Load more

Recommended publications
  • Uila Supported Apps
    Uila Supported Applications and Protocols updated Oct 2020 Application/Protocol Name Full Description 01net.com 01net website, a French high-tech news site. 050 plus is a Japanese embedded smartphone application dedicated to 050 plus audio-conferencing. 0zz0.com 0zz0 is an online solution to store, send and share files 10050.net China Railcom group web portal. This protocol plug-in classifies the http traffic to the host 10086.cn. It also 10086.cn classifies the ssl traffic to the Common Name 10086.cn. 104.com Web site dedicated to job research. 1111.com.tw Website dedicated to job research in Taiwan. 114la.com Chinese web portal operated by YLMF Computer Technology Co. Chinese cloud storing system of the 115 website. It is operated by YLMF 115.com Computer Technology Co. 118114.cn Chinese booking and reservation portal. 11st.co.kr Korean shopping website 11st. It is operated by SK Planet Co. 1337x.org Bittorrent tracker search engine 139mail 139mail is a chinese webmail powered by China Mobile. 15min.lt Lithuanian news portal Chinese web portal 163. It is operated by NetEase, a company which 163.com pioneered the development of Internet in China. 17173.com Website distributing Chinese games. 17u.com Chinese online travel booking website. 20 minutes is a free, daily newspaper available in France, Spain and 20minutes Switzerland. This plugin classifies websites. 24h.com.vn Vietnamese news portal 24ora.com Aruban news portal 24sata.hr Croatian news portal 24SevenOffice 24SevenOffice is a web-based Enterprise resource planning (ERP) systems. 24ur.com Slovenian news portal 2ch.net Japanese adult videos web site 2Shared 2shared is an online space for sharing and storage.
    [Show full text]
  • Download Report
    cover_final_02:Layout 1 20/3/14 13:26 Page 1 Internet Watch Foundation Suite 7310 First Floor Building 7300 INTERNET Cambridge Research Park Waterbeach Cambridge WATCH CB25 9TN United Kingdom FOUNDATION E: [email protected] T: +44 (0) 1223 20 30 30 ANNUAL F: +44 (0) 1223 86 12 15 & CHARITY iwf.org.uk Facebook: Internet Watch Foundation REPORT Twitter: @IWFhotline. 2013 Internet Watch Foundation Charity number: 1112 398 Company number: 3426 366 Internet Watch Limited Company number: 3257 438 Design and print sponsored by cover_final_02:Layout 1 20/3/14 13:26 Page 2 OUR VISION: TO ELIMINATE ONLINE CHILD SEXUAL ABUSE IMAGES AND VIDEOS To help us achieve this goal we work with the following operational partners: OUR MEMBERS: Our Members help us remove and disrupt the distribution of online images and videos of child sexual abuse. It is with thanks to our Members for their support that we are able to do this work. As at December 2013 we had 110 Members, largely from the online industry. These include ISPs, mobile network operators, filtering providers, search providers, content providers, and the financial sector. POLICE: In the UK we work closely with the “This has been a hugely important year for National Crime Agency CEOP child safety online and the IWF have played a Command. This partnership allows us vital role in progress made. to take action quickly against UK-hosted criminal content. We also Thanks to the efforts of the IWF and their close work with international law working with industry and the NCA, enforcement agencies to take action against child sexual abuse content hosted anywhere in the world.
    [Show full text]
  • UNIT -III Computer Network Overview Computer Networking Or Data
    UNIT -III Computer Network Overview Computer networking or data communication is a most important part of the information technology. Today every business in the world needs a computer network for smooth operations, flexibly, instant communication and data access. Just imagine if there is no network communication in the university campuses, hospitals, multinational organizations and educational institutes then how difficult are to communicate with each other. In this article you will learn the basic overview of a computer network. The targeted audience of this article is the people who want to know about the network communication system, network standards and types. A computer network is comprised of connectivity devices and components. To share data and resources between two or more computers is known as networking. There are different types of a computer network such as LAN, MAN, WAN and wireless network. The key devices involved that make the infrastructure of a computer network are Hub, Switch, Router, Modem, Access point, LAN card and network cables. LAN stands for local area network and a network in a room, in a building or a network over small distance is known as a LAN. MAN stands for Metropolitan area network and it covers the networking between two offices within the city. WAN stands for wide area network and it cover the networking between two or more computers between two cities, two countries or two continents. There are different topologies of a computer network. A topology defines the physical layout or a design of a network. These topologies are star topology, bus topology, mesh topology, star bus topology etc.
    [Show full text]
  • Event Detection from Image Hosting Services by Slightly-Supervised Multi-Span Context Models
    Event Detection from Image Hosting Services by Slightly-supervised Multi-span Context Models Mohamed Morchid, Richard Dufour, Georges Linares` University of Avignon Laboratoire d’Informatique d’Avignon Avignon, France mohamed.morchid, richard.dufour, georges.linares @univ-avignon.fr f g Abstract—We present a method to detect social events in a set LDA is a statistical model that considers a text document of pictures from an image hosting service (Flickr). This method as a mixture of latent topics. One of the main problem of relies on the analysis of user-generated tags, by using statistical LDA representation lies in the choice of the topic-space di- models trained on both a small set of manually annotated mensionality N, that is priorly fixed before the model estimate. data and a large data set collected from the Internet. Social Indeed, the model granularity is directly dependent from N: event modeling relies on multi-span topic model based on LDA (Latent Dirichlet Allocation). Experiments are conducted in the a low value leads to estimate coarse classes, that may be experimental setup of MediaEval’2011 evaluation campaign. The viewed as domain or thematic models. On the other side, a high proposed system outperforms significantly the best system of this dimensionality leads to narrow classes that may represent fine benchmark, reaching a F-measure score of about 71%. topics or concepts. Therefore, the choice of N determines the model granularity that should depend on the task objectives. I. INTRODUCTION This problem was addressed in many previous works, that mainly focused on the search of the optimal model granular- The image hosting platforms such as Picasa, Flickr or ity; some of them proposed multi-granularity approaches, by Drawin allow users to easily share pictures or to browse image hierarchical LDA modeling [6], bag of multimodal models [7] galleries.
    [Show full text]
  • The Web ICT Systems for Business Networking Vito Morreale
    ICT Systems for Business Networking Vito Morreale The Web ICT Systems for Business Networking Vito Morreale Note. The content of this document is mainly drawn from Wikipedia [www.wikipedia.org] and follows GNU Free Documentation License (GFDL), the license through which Wikipedia's articles are made available. The GNU Free Documentation License (GFDL) permits the redistribution, creation of derivative works, and commercial use of content provided its authors are attributed and this content remains available under the GFDL. Material on Wikipedia (and this document too) may thus be distributed multilingually to, or incorporated from, resources which also use this license. Table of contents 1 INTRODUCTION ................................................................................................................................................ 3 2 HOW THE WEB WORKS .................................................................................................................................. 4 2.1 PUBLISHING WEB PAGES ....................................................................................................................................... 4 2.2 SOCIOLOGICAL IMPLICATIONS ................................................................................................................................ 5 3 UNIFORM RESOURCE IDENTIFIER (URI) ................................................................................................. 5 4 HYPERTEXT TRANSFER PROTOCOL (HTTP) ........................................................................................
    [Show full text]
  • Furnizarea De Servicii Hosting – La Limita Dintre Content Şi Comunicaţii Electronice
    Furnizarea de servicii hosting – la limita dintre content şi comunicaţii electronice Monica Adriana Banu – Consilier Juridic Octombrie 2007 La întrebarea ce înseamnă „hosting” se răspunde de cele mai multe ori „găzduire site- uri”, termenul „hosting” devenind generic pentru ceea ce înseamnă web hosting sau web site hosting. Un studiu adecvat a detaliilor tehnice specifice acestui serviciu va demonstra că serviciul prin care sunt găzduite, deservite şi menţinute fişiere pe mai multe website-uri (webhosting-ul), reprezintă doar o categorie a hosting – ului, una dintre modalităţile de furnizare a acestui tip de serviciu. O altă confuzie care se creează în legătură cu hostingul provine de asemenea de la conexiunea acestuia cu conţinutul informaţional găzduit, furnizorul de hosting fiind confundat de cele mai multe ori cu un „content provider” adica „furnizor de conţinut” (conţinut informaţional). Studiul de faţă va identifica în primă fază webhostingul ca fiind doar una dintre posibilităţile de furnizare a serviciilor de hosting, urmând să fie demonstrat în continuare că ceea ce înseamnă webhosting nu coincide cu furnizarea de conţinut informaţional fiind mai degrabă un serviciu de comunicaţii electronice astfel cum este definit de Ordonanţa Guvernului nr.34/2002 privind accesul la reţelele publice de comunicaţii electronice şi la infrastructura asociată, precum şi la interconectarea acesteia, cu modificările şi completările ulterioare. 1. Serviciile de hosting – detalii tehnice/categorii Serviciile de hosting se împart în următoarele categorii: servicii complete de hosting, servicii de webhosting, servicii de hosting fişiere, servicii de game hosting (servicii de găzduire jocuri), servicii remote backup, servicii DNS şi servicii de e-mail hosting. O companie poate furniza în acelaşi timp servicii complete de hosting cât şi servicii de webhosting sau email hosting, şi acest lucru este destul de întâlnit, o astfel de afacere urmărind să acopere toate necesităţile clienţilor (toată cererea de pe piaţă) prin furnizarea unui număr cât mai mare şi complet de servicii.
    [Show full text]
  • Download Report
    Design and print sponsored by 2014 AT A GLANCE Since 1996: SimSimpleple 5 ststepep onlineonline 2014 vs 2013 repreportingorting 141,000 URLs removed globally ffoormrm Total Over 500,000 reports assessed 80,000 Public 2014 74,119 Proactive 2014 70,000 137% Public 2013 1. increase on 2013 IWF receives reports from 60,000 Total the public and proactively 51,186 searches for criminal content 50,000 50,587 in order to remove it. 100% 9% both In 2014 IWF was able, for the 40,000 Total Reports first time, to proactively search 9% boys 31,266 for child sexual abuse content 80% 30,000 resulting in 137% increase in 2. 9,133 criminal URLs found. IWF assesses all reports 20,000 Total strictly against UK law. 30% 13,182 60% Assessments include B 23,532 10,000 22,133 age, gender and abuse 80% 80% category levels. ≤10 girls 40% 0 Reports Child Child Reports PORTS processed sexual processed sexual E 43% abuse abuse . R 2 URLs URLs 1 . A 20% A S S E S 4% ≤2 S 0 All UK child sexual abuse URLs M Abuse Age Gender were removed within 4 days NT E category (years) E N 84% of URLs hosted T levels 5. T outside the UK are removed N REPORTING IWF works with the police O within 10 days C 100% and internet content hosts . PROCESS 90% to remove criminal content 5 wherever it is hosted in SPEED IS 80% the world. 70% EVERYTHING 3. 60% This ensures: G IWF traces the content N to its hosting location 50% • Prevention of abuse I investigations 4 C and contacts the sts police hildren 40% victims’ images being .
    [Show full text]
  • Welcome to the ALAI Questionnaire on Online Practices of Author-Identification!
    Welcome to the ALAI questionnaire on online practices of author-identification! The purpose of this questionnaire is to ascertain what author-identification practices are commonly used in ALAI National group countries when works are disseminated online. The results will be used to determine what it means for the name of the author "to appear on the work in the usual manner" (Berne Convention, art. 15) when the work is disseminated over online media. 1. Name and surname of the respondent: Stefanía Landaeta and Yecid Ríos 2. E-mail address: [email protected] 3. Which ALAI National group do you represent? CECOLDA (Colombia) 4. If your responses relate to more countries, please list them here: Colombia Photography and Visual Arts 5. Who are the most prominent photo/visual art sharing platforms or visual content providers in your region? On what other sites (including the authors’ own) do photographs and other works of visual art appear? Flickr: This is a webside of image hosting service and video hosting service. The images that the photographers upload to Flickr go into their sequential presentation of photos, the basis of a Flickr account. All the list or presentation of photos can be displayed as a justified view, of the achieve details. It’s available at: www.flickr.com Instagram: Is Platform to support several types of apps and services. The users of the website can to share their own content with apps or services. The Instagram Platform help broadcasters and publishers discover content, get digital rights to media, and share media using web embeds. It`s available at: www.instagram.com 1 Facebook: This is a social network that allows users to add other users as "friends", exchange messages, post status updates, share photos, videos and links, use various software applications (applications) and receive notifications of the activity of other users.
    [Show full text]
  • Stealthwatch V7.0 Default Applications Definitions
    Cisco Stealthwatch Default Applications Definitions 7.0 Stealthwatch® v7.0 Default Applications Definitions Stealthwatch® v7.0 Default Applications Definitions The table in this document lists the default Stealthwatch applications defined on the Custom Applications page in the SMC Web App. The intended audience for this document includes users who want a clearer understanding of what com- prises a default application that Stealthwatch monitors. In the table below, the number in parentheses after the application name is a unique identifier (UID). Application Criteria Name Description Stealthwatch Classification Port/Protocol Registered with IANA on port 629 3com AMP3 3com AMP3 (719) TCP/UDP. Registered with IANA on port 106 3com TSMUX 3com TSMUX (720) TCP/UDP. The Application Configuration Access Pro- tocol (ACAP) is a protocol for storing and synchronizing general configuration and preference data. It was originally ACAP ACAP (722) developed so that IMAP clients can easily access address books, user options, and other data on a central server and be kept in sync across all clients. AccessBuilder (Access Builder) is a family AccessBuilder AccessBuilder (724) Copyright © 2018 Cisco Systems, Inc. All rights reserved. - 2 - Stealthwatch® v7.0 Default Applications Definitions Application Criteria Name Description Stealthwatch Classification Port/Protocol of dial-in remote access servers that give mobile computer users and remote office workers full access to workgroup, depart- mental, and enterprise network resources. Remote users dial into AccessBuilder via analog or digital connections to get direct, transparent links to Ethernet and Token Ring LANs-just as if they were connected locally. AccessBuilder products support a broad range of computing platforms, net- work operating systems, and protocols to fit a variety of network environments.
    [Show full text]
  • Google Spreadsheet Image Mode
    Google Spreadsheet Image Mode Denominate Eduard sometimes bever his fluorspar botanically and shoe so knowingly! Revocable and saleable Winfred fother her thickheads triple-tongues or bulks loveably. Uninhabitable Patricio psychologizing that daffadowndillies dandles laggingly and bootleg troubledly. You image will continue with images in spreadsheet directly in chrome extension is making it is extremely useful if html. Google Sheets, with a normal distribution curve overlaid. Keep updates on spreadsheet files, images and image modes give the mode, you to manage piazza tool? Here one topic also blind a description of bullet chart. Stay tuned for google spreadsheet or image modes as a little different. So much more spreadsheet cells are google spreadsheets will be images in google constantly flags as. Create image gallery from Google Sheet Updatefy Blog. Anyone attempts to a truly engaging experience and drag and. One image modes, images to stack exchange is there are creating a new orbital system drive root cause in nature, explain a google drive? These grades can be shared with other members which distinguish them to month the performance of each part make changes accordingly. An image editing one location and cover letter, drawing as incorrect email for images into a blank row, there another loop through sections. Also implicit was wondering if I the name the sheets with a combination of cells from the sheets? Google docs to html script Slobraz. How To withhold an initial to Your Google Spreadsheet Cell. It will google spreadsheets the image to your pc computers. Creating drop down press for cells by selecting Data validation, these lists are created based on particular criteria.
    [Show full text]
  • Blogger's Guide to HTML by Dan Gookin
    Blogger’s Guide to HTML By Dan Gookin Blogger’s Guide to HTML Page 1 Introduction Welcome to you basic blogger’s guide for HTML formatting. Over the next few pages you’ll learn the simple codes required to format your text, insert web links, and add pictures to your posts. Hopefully I can answer some of the questions you’ve had about how others do the fancy stuff, and can show how they do it! Honestly, it’s no big secret, and it’s not that difficult. Soon you’ll be posting like an expert. If you’d like to keep this guide handy, then I suggest that you print it out. Better still, print it on some three-hole punch paper for easy binding. Or just print the Quick Ref at the back. The information here is provided free, though if you’d like to make a suggested donation of $1.25, it would gladly be accepted. See http://www.wambooli.com/donate. Thank you! Dan Gookin [email protected] Blogger’s Guide to HTML By Dan Gookin First edition, March 2007 Copyright © 2007 by Quantum Particle Bottling Co. This document may be distributed freely with the following restrictions: • You cannot charge to access or copy this document. • You cannot modify this document. • You cannot reproduce or use any part or portion of this document in another media without written permission of the author. Notes, corrections and errata may be sent to [email protected]. Check http://www.wambooli.com/help/bloggers/ for the latest edition of this document as well as a handy test-your-HTML thingy, and other helpful information.
    [Show full text]
  • Stealthwatch V6.9.0 Default Applications Definitions
    TABLE | Stealthwatch v6.9 Default Applications Definitions STEALTHWATCH® V6.9 DEFAULT APPLICATIONS DEFINITIONS Stealthwatch (SMC) v6.9 Default Applications Definitions The table in this document lists the default Stealthwatch applications defined on the Custom Applications page in the SMC Web Application (App) interface. Audience The intended audience for this document includes users who want a clearer understanding of what comprises a default application that Stealthwatch monitors. Note: In the table below, the number in parentheses after the application name is a unique identifier (UID). Name Application Criteria Description Stealthwatch Port/ IP Range Classification Protocol 3com AMP3 3com AMP3 (719) Registered with IANA on port 629 TCP/UDP. 3com TSMUX 3com TSMUX (720) Registered with IANA on port 106 TCP/UDP. ACAP ACAP (722) The Application Configuration Access Protocol (ACAP) is a protocol for storing and synchronizing general configuration and preference data. It was originally developed so that IMAP clients can easily access address books, user options, and other data on a central server and be kept in sync across all clients. 1 TABLE | Stealthwatch v6.9 Default Applications Definitions Name Application Criteria Description Stealthwatch Port/ IP Range Classification Protocol AccessBuilder AccessBuilder (724) AccessBuilder (Access Builder) is a family of dial-in remote access servers that give mobile computer users and remote office workers full access to workgroup, departmental, and enterprise network resources. Remote users dial into AccessBuilder via analog or digital connections to get direct, transparent links to Ethernet and Token Ring LANs-just as if they were connected locally. AccessBuilder products support a broad range of computing platforms, network operating systems, and protocols to fit a variety of network environments.
    [Show full text]