{"id":1439,"date":"2014-03-29T08:54:53","date_gmt":"2014-03-29T06:54:53","guid":{"rendered":"http:\/\/saisa.eu\/blogs\/Guidance\/?p=1439"},"modified":"2014-03-29T15:40:17","modified_gmt":"2014-03-29T13:40:17","slug":"report-on-cybersecurity-black-market-by-rand-and-juniper","status":"publish","type":"post","link":"https:\/\/saisa.eu\/blogs\/Guidance\/?p=1439","title":{"rendered":"Report on Cybersecurity Black Market, by RAND and Juniper"},"content":{"rendered":"

RAND<\/a> has published an interesting report on the cybersecurity black market. This report “Markets for Cybercrime Tools and Stolen Data<\/a>” was sponsored by Juniper<\/a> . (direct link to pdf<\/a>).<\/p>\n

This report is good reading for any security professional, worth to have a look!<\/p>\n

Some highlights from the report<\/strong><\/p>\n

\n

The hacker market has emerged as a playground of financially driven, highly organized, and sophisticated groups.
\nBlack markets are organized and run for the purpose of cybercrime; they deal in exploit kits, botnets, Distributed Denial of Service (DDoS), attack
\nservices, and the fruits of crime (e.g., stolen credit card numbers, compromised hosts).<\/p>\n

Gray markets, by our definition, are limited to the exchange of vulnerabilities and exploits, the dis-covery and development of which are not illegal per se (legitimate companies, for instance, often pay for information about vulnerabilities in their own products), but can nevertheless be troubling because they also complicate the life of system defenders.<\/p>\n<\/blockquote>\n

\"RAND-blackmarket2014a\"<\/a><\/p>\n

\n

Products include both goods (hacking tools, digital assets) and services (as-a-service hacking, digital asset handling).<\/p>\n

\"RAND-blackmarket2014b\"<\/a><\/p>\n

The black market can be more profitable than the illegal drug trade: Links to end-users are more direct, and because worldwide distribution is accomplished electronically, the requirements are negligible.<\/p>\n

\"RAND-blackmarket2014c\"<\/a><\/p>\n<\/blockquote>\n

Links<\/strong><\/p>\n