Cybercrime Project: Better Policing Collaborative (BPC) Dr David Hicks Dr Siddhartha Bandyopadhyay Mr Nir Tolkovsky Ms Ariana Matsa University of Derby University of Birmingham Inaugural Workshop Centre for Crime, Justice and Policing University of Birmingham 1 July 2016 www.derby.ac.uk Better Policing Collaborative (BPC): This work is funded by the College of Policing, the Higher Education Funding Council for England, and the Home Office and is being carried out as part of a collaborative project of the University of Nottingham, University of Liverpool, University of Birmingham, University of Derby, University Campus Suffolk, Crest Analytics (UK) Ltd and Skills for Justice. www.derby.ac.uk Scope of the project • Identifying the evidence gap through consultation with police and specialist cyber units, businesses and individuals affected by it; • Developing both the evidence base and a practical evidence typology; • Working with force specialist units and/or regional cyber units to: – Provide support via evidence review, evaluation and technical support to shape evidence-based tactical and strategic decisions; – Pool information towards a standardised approach based upon identified good practice within and across forces. www.derby.ac.uk Reductions in crime and victimisation? Office for National Statistics (ONS, 2015) www.derby.ac.uk Preliminary consultations Outreach to law enforcement, businesses, and individuals affected by cybercrime to obtain: 1) A sample of key words for a literature search of academic sources supplemented by professional and ‘grey’ literature; 2) ‘Forces only’ generic information: • Information about cybercrime (referrals, reports, intelligence, and detection mechanisms); • Unit structures and internal and external relationships; • Strategies and tactics, and priority challenges; www.derby.ac.uk Key word search terms [[Cyber OR internet OR spam OR identity OR digital OR computer OR cloud OR online OR social media OR [Organised OR organized]] AND [fraud OR victim OR unit OR regional OR “ROCU” OR [task force OR task-force] OR phishing OR smishing OR vishing OR pharming OR theft OR stealing OR spoofing OR hacking OR cracker OR stalking OR dedicated denial of service attack OR DDoS OR forensics OR scam OR [“dark web” OR “dark-web”] OR “darknet” crimeware OR ransomware OR botnet OR phreaking OR blackmail OR intrusion OR firewall OR hacktivism OR booter OR stresser OR script kiddie OR doxxing OR zephyr OR botnet OR malware OR Trojans OR streetwise OR spyware OR clickjacking, zombie OR [[keylog OR keylogger OR scareware OR adware OR worm OR virus]] www.derby.ac.uk Results of key word searches Key word search – 2,073,446 results Since 2010 – 959,220 results Since 2010 – [cyber OR internet] AND crime - 39,227 Since 2010 – ((cyber OR internet) AND crime) AND ((literature OR evidence) AND review) – 280 www.derby.ac.uk Comprehensive cybercrime framework (Wall, 2001) • Cyber-trespassing – Transgressing digital ownership • Cyber-deception/theft – Illegally acquiring information or valued data • Cyber-porn and obscenity – Technology that enables sexually-related activities and potential crimes • Cyber-violence – Efforts to generate real and virtual harm www.derby.ac.uk Analytical cybercrime typology (Wall, 2010) • Crimes against machines – Affecting systems or causing an effect • Crimes using machines – Leveraging of ‘traditional’ crimes • Crimes in the machine – Illegal content www.derby.ac.uk Towards analytical and practice-oriented typologies • Cybercrime as an umbrella concept: – It originates from the domain of science fiction; – It is a method or a tool rather than a specific crime type. • The need to normalise and systematise the understanding of, and responses to, cybercrime through focus on the: – Application of crime scripting (Cornish and Clarke, 2002) to a selected form of cybercrime; – Identify the underlying offences and criminal typology; – Identification of methods-related challenges for criminals, and opportunities for detection and investigation using existing powers. www.derby.ac.uk Thank you Dr David Hicks Dr Siddhartha Bandyopadhyay [email protected] [email protected] www.derby.ac.uk References Cornish, D. and Clarke, R. (2002). Analyzing Organized Crime. In: A. Piquero and S. Tibbets, ed., Rational Choice and Criminal Behavior: Recent Research and Future Challenges, 1st ed. New York: Routledge, pp.41-63. Office for National Statistics. (2015). Crime in England and Wales: Year ending December 2015. London: Office for National Statistics. Wall, D. (2001). Crime and the internet. New York: Routledge. Wall, D. (2010). The Internet as a Conduit for Criminals. In Information Technology and the Criminal Justice System (Ed.). CA: Sage: Thousand Oaks, pp.77-98. www.derby.ac.uk.