DAILY TRENDS AND ORIGIN OF COMPUTER-FOCUSED CRIMES AGAINST A LARGE UNIVERSITY COMPUTER NETWORK: An Application of the Routine-Activities and Lifestyle Perspective

• Published in: British journal of criminology Vol. 53; no. 2; pp. 319 - 343
• Main Authors: Maimon, David, Kamerdze, Amy, Cukier, Michel, Sobesto, Bertrand
• Format: Journal Article
• Language: English
• Published: London OXFORD UNIVERSITY PRESS 01-03-2013; Oxford Publishing Limited (England)
• Subjects: Computer networking; Computer networks; Computers; Crime; Crime causes; Crime in schools; Crime patterns; Crime prevention; Crime victims; Criminal justice; Criminology; Cybercrime; Cybercrimes; Internet; Internet security; Network analysis; Network security; Personal computers; Threat
• ISSN: 0007-0955; 1464-3529
• DOI: 10.1093/bjc/azs067

Cybercrime has been the focus of public attention during the last decade. However, within the criminological field, no prior research initiatives have been launched in an effort to better understand this phenomenon using computer network data. Addressing this challenge, we employ the classical routine-activities and lifestyle perspective to raise hypotheses regarding the trends and origin of computer-focused crime incidents (i.e. computer exploits, port scans, and Denial of Service (DoS) attacks) against a large university computer network. We first propose that computer-focused crimes against a university network are determined by the university users' daily activity patterns. In addition, we hypothesize that the social composition of the network users determines the origin of computer attacks against the university network. We use data recorded between the years 2007 and 2009 by an Intrusion Prevention System (IPS) to test these claims. Consistently with our theoretical expectations, two important findings emerge. First, computer attacks are more likely to occur during university official business hours. Second, an increase in the number of foreign network users substantially increases the number of computer-focused crimes originating from Internet Protocol (IP) addresses linked with these users' countries of origin. Future directions for subsequent studies are discussed.