4 papers
How It's Made: Uncovering Detection Engineering Processes for Network Intrusion Detection Rules
Koen T. W. Teuwen, Emmanuele Zambon, Luca Allodi
Many Security Operations Centers rely on signature-based Network Intrusion Detection Systems like Suricata, yet detection rule engineering remains understudied. We investigate this…
TeleHunt: A Framework and Tool for Efficient Cybercriminal Community Discovery on Telegram
Roy Ricaldi, Victor Asanache, Luca Allodi
This paper presents TeleHunt, a framework and tool for evaluating the effectiveness of different strategies to discover cybercriminal communities on Telegram. TeleHunt employs a se…
Topical Shifts in the Dark Web: A Longitudinal Analysis of Content from the Cybercrime Ecosystem
Roy Ricaldi, Maximilian Schafer, Philipp Zech +3
The dark web hosts a dynamic ecosystem of cybercrime forums and marketplaces that adapt to law enforcement pressure, technological change, and economic incentives. Prior research h…
Where is Dmitry going? Framing 'migratory' decisions in the criminal underground
Luca Allodi, Roy Ricaldi, Jai Wientjes +1
The cybercriminal underground consists of hundreds of forum communities that function as marketplaces and information-exchange platforms for both established and wannabe cybercrimi…