Markets for cybercrime tools and stolen data
Subtitle: hackers' bazaar
By: Lillian Ablon, Martin C. Libicki, Andrea A. Golay
Contributors: Libicki, Martin C., author; Golay, Andrea A., author; Rand Corporation; Acquisition and Technology Policy Center; Juniper Networks, Inc; Rand Corporation. National Security Research Division
Publisher: RAND Corporation
Published: 2014
Place of publication: Santa Monica, CA
Language: eng
Number of pages: 65
ISBN-13: 9780833087119
Copyright date: 2014
Subjects: Hacking; Black market; Economic aspects; Computer crimes; Data protection
Description: "Criminal activities in cyberspace are increasingly facilitated by burgeoning black markets for both tools (e.g., exploit kits) and take (e.g., credit card information). This report, part of a multiphase study on the future security environment, describes the fundamental characteristics of these markets and how they have grown into their current state to explain how their existence can harm the information security environment. Understanding the current and predicted landscape for these markets lays the groundwork for follow-on exploration of options to minimize the potentially harmful influence these markets impart. Experts agree that the coming years will bring more activity in darknets, more use of crypto-currencies, greater anonymity capabilities in malware, and more attention to encrypting and protecting communications and transactions; that the ability to stage cyberattacks will likely outpace the ability to defend against them; that crime will increasingly have a networked or cyber component, creating a wider range of opportunities for black markets; and that there will be more hacking for hire, as-a-service offerings, and brokers. Experts disagree, however, on who will be most affected by the growth of the black market (e.g., small or large businesses, individuals), what products will be on the rise (e.g., fungible goods, such as data records and credit card information; non-fungible goods, such as intellectual property), or which types of attacks will be most prevalent (e.g., persistent, targeted attacks; opportunistic, mass 'smash-and-grab' attacks)."
Notes: "RAND National Security Research Division."

"The research described in this report was sponsored by Juniper Networks and conducted within the Acquisition and Technology Policy Center of the RAND National Security Research Division"--Verso of title page.

"RR-610-JNI"--Page 4 of cover.

Includes bibliographical references (pages 53-65).
Table of contents: title: Summary; title: Introduction and research methodology; title: Characteristics of the black market; title: The black market and botnets; title: Zero-day vulnerabilities in the black and gray markets; title: Are hacker black markets mature?; title: Projections and predictions for the black market; title: Conclusions; title: For future research; title: Appendixes. A. Text of the black market timeline ; B. Glossary.