Feeds

Boffins plot to disrupt underground black markets

Fake IDs to thwart trade in stolen IDs

The Power of One eBook: Top reasons to choose HP BladeSystem

Academic researchers are developing techniques to disrupt underground black markets frequented by malicious hackers and virus writers.

Researchers at Carnegie Mellon University have developed two approaches to interrupt the operation of black market sites that hawk viruses, stolen data, and attack services.

One tactic involves bad mouthing buyers or sellers in order to eliminate their verified status, discouraging others from engaging in trades with them. The other attacks the effectiveness of the markets themselves by undermining the cybercrooks' verification or reputation system, creating a deceptive sales environment.

One technique developed by the team involves establishing fake verified-status identities that are difficult to distinguish from other-verified status sellers, making it hard for buyers to identify "honest" verified-status sellers from "dishonest" verified-status sellers.

"Just like you need to verify that individuals are honest on eBay, online criminals need to verify that they are dealing with 'honest' criminals," explained Jason Franklin, a PhD student in computer science at Carnegie Mellon.

Franklin, and fellow researcher Adrian Perrig at Carnegie Mellon, has been working with Vern Paxson of the International Computer Science Institute and Stefan Savage of the University of California, San Diego, in designing new computer tools to better understand and potentially thwart the growth of online black markets.

The project involved monitoring the black market for seven months and developing automated tools to make sense of the data. The researchers estimate trades in illegal materials worth an estimated $37m took place during the monitoring period. This involved the trade in 80,000 credit card records, though how many of these were valid was outside the scope of the project.

Despite law enforcement actions against known black market sites, such as the US Secret Service-run Operation Firewall three years ago, underground sites continue to proliferate. The operation, which targeted the notorious Shadowcrew and resulted in 28 arrests around the globe, barely scratched the surface of the problem, according to Carnegie Mellon researchers.

"The scary thing about all this is that you do not have to be in the know to find black markets, they are easy to find, easy to join and just a mouse click away," Franklin said. ®

Designing a Defense for Mobile Applications

More from The Register

next story
Secure microkernel that uses maths to be 'bug free' goes open source
Hacker-repelling, drone-protecting code will soon be yours to tweak as you see fit
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
Four fake Google haxbots hit YOUR WEBSITE every day
Goog the perfect ruse to slip into SEO orfice
Putin: Crack Tor for me and I'll make you a MILLIONAIRE
Russian Interior Ministry offers big pile o' roubles for busting pro-privacy browser
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.