A Crime Script Analysis of Brute Force Attacks against Israeli and Chinese University Computer Networks

• In Event: The Effect of Computing Environments and Network Configurations on Hackers’ Illegitimate Online Behaviors During the Progression of System Trespassing Events

Abstract

Honeypots are computers that are created for the sole purpose of being attacked. Previous research has shown that the usage of honeypots is fruitful for theoretical testing. Utilizing honeypot data from universities in Israel and China, we conducted a crime script analysis to better understand what offenders did when entering these “places,” including how long they stayed, whether any action was taken (e.g., enter keystrokes), what type of actions were taken when they occurred (e.g., the types of commands they entered), and the steps they took to exit the crime scene with minimal risk of detection. In addition, we examined the seriousness of the commands entered during each session and whether the seriousness of commands varied over time. The presentation will conclude with theoretical, methodological, and policy implications.

Authors

• Wuling Ren, Zhejiang Gongshang University

• Adam Bossler, Georgia Southern University

• Tamar Berenblum, Hebrew University

• David Maimon, University of Maryland

• Ido Sevilla, Hebrew University