Cybercrime Business Models: Developing an Approach for Effective Security against Better Organized Criminals

Abstract

Cyber criminals and online criminal gangs are malicious actors with new business models. Today's cybercriminals are well organized, business savvy, and developing advanced techniques in exploiting organizations. They combine social engineering, viruses, trojans and spyware with sophisticated profit models, business plans and organization. This study addresses the following research question: What are the emerging cybercriminal business models and how are cybercriminals generating revenues? We will answer this question using qualitative and quantitative methodology exploring recent exploits, through executive interviews and independent evaluation. This paper will evaluate the business models that emerge using a validated business framework to score and explore the sophistication of these models. We will also share how business leaders can address these growing concerns.