Quantitative assessment of risk reduction with cybercrime black market monitoring

L. Allodi, W. Shim, F. Massacci

Onderzoeksoutput: Hoofdstuk in Boek/Rapport/CongresprocedureConferentiebijdrageAcademicpeer review

19 Citaten (Scopus)


Cybercrime is notoriously maintained and empowered by the underground economy,manifested in black markets. In such markets, attack tools and vulnerability exploitsare constantly traded. In this paper, we focus on making a quantitative assessment of the riskof attacks coming from such markets, and investigating the expected reduction in overall attacks against final users if, for example, vulnerabilities traded in the black marketswere all to be promptly patched. In order to conduct the analysis, we mainly use the data on (a) vulnerabilities bundled in 90+ attack tools traded in the black markets collected by us;(b) actual records of 9x10^7 attacks collected fromSymantec's Data Sharing Programme WINE.Our results illustrate that black market vulnerabilities are an important source of risk for thepopulation of users; we further show that vulnerability mitigation strategies based on black marketsmonitoring may outperform traditional strategies based on vulnerability CVSS scores byproviding up to 20% more expected reduction in attacks.

Originele taal-2Engels
TitelProceedings - IEEE CS Security and Privacy Workshops, SPW 2013
Plaats van productiePiscataway
UitgeverijInstitute of Electrical and Electronics Engineers
Aantal pagina's8
ISBN van geprinte versie978-1-4799-0458-7
StatusGepubliceerd - 2013
Extern gepubliceerdJa
Evenement2nd IEEE Security and Privacy Workshops, SPW 2013 - San Francisco, CA, Verenigde Staten van Amerika
Duur: 23 mei 201324 mei 2013


Congres2nd IEEE Security and Privacy Workshops, SPW 2013
Land/RegioVerenigde Staten van Amerika
StadSan Francisco, CA


Duik in de onderzoeksthema's van 'Quantitative assessment of risk reduction with cybercrime black market monitoring'. Samen vormen ze een unieke vingerafdruk.

Citeer dit