Cybercrime Information Center

The Cybercrime Information Center is a repository for studies, measurements, data sets, statistics, and analyses of global security threats involving the Internet’s unique identifier systems: the Domain Name System (DNS), and the Internet’s numbering systems (Internet Protocol, IP, Autonomous System, AS).

Our Mission

Identify and expose domain name system (DNS) and Internet addressing systems abuse and the contexts in which it occurs—particularly those in which criminal abuse is highly concentrated. The Center's data repository will enable cyber investigators and researchers to:

• discover where criminals obtain the resources they need to pursue their attacks;

• identify and observe concentrations of criminal activity;

• measure, quantify, and rank resource providers—registries, registrars, and resellers;

• measure, quantify, and rank service providers—ISPs, operators of web, DNS, and mail hosting services, and cloud services;

• observe and analyze criminal behavior over time; and

• identify and codify indicators that lead to the discovery of new abusive domains, such as by using pivot points (behavioral analytics, available registration information),

We collect threat intelligence data, process these, and report what we find and learn.By publishing measurements, we make known the organizations that, wittingly or not, facilitate cybercriminal activity, as defined in the Council of Europe’s Convention on Cybercrime. The Center updates its data repository at least daily for those threats we have measured so that our studies can be repeated periodically and so that broader longitudinal analyses can be conducted in the future. We provide scientifically reliable data that governments, researchers, businesses, and others can use to evaluate the policies and practices that (intentionally or unintentionally) attract, encourage, or facilitate criminal activity.

The Center’s studies adhere to a scientific rigor: we describe our methodology and identify our origin data, which is commercially or publicly available. We publish measurements and our summary data so that others can attempt to produce same or similar results by repeating our analyses. Our findings are our own and not influenced or filtered by our sponsors or by policy, industry, or trade communities.

We seek to catalyze systemic change

Project data will enable Internet researchers to identify and study the systemic failures or shortcomings that created the opportunity for online crime to flourish. Researchers and policy-makers can then consider ways to improve the Internet systems that have been exploited for unintended and criminal purposes.