From 46b8c68cda231cd746281d97749232c4a50d0d35 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Fri, 17 May 2019 16:33:22 +0200 Subject: [PATCH] add: [dark-web] Criminal motivation on the dark web: A categorisation model for law enforcement Ref: Criminal motivation on the dark web: A categorisation model for law enforcement Janis Dalins, Campbell Wilson, Mark Carman --- MANIFEST.json | 7 +- dark-web/machinetag.json | 140 +++++++++++++++++++++++++++++++++++++++ 2 files changed, 146 insertions(+), 1 deletion(-) create mode 100644 dark-web/machinetag.json diff --git a/MANIFEST.json b/MANIFEST.json index b2185a7..05408de 100644 --- a/MANIFEST.json +++ b/MANIFEST.json @@ -454,11 +454,16 @@ "version": 1, "name": "ransomware", "description": "Ransomware is used to define ransomware types and the elements that compose them." + }, + { + "version": 1, + "name": "dark-web", + "description": "Criminal motivation on the dark web: A categorisation model for law enforcement. ref: Janis Dalins, Campbell Wilson, Mark Carman. Taxonomy updated by MISP Project." } ], "path": "machinetag.json", "url": "https://raw.githubusercontent.com/MISP/misp-taxonomies/master/", "description": "Manifest file of MISP taxonomies available.", "license": "CC-0", - "version": "20190410" + "version": "20190517" } diff --git a/dark-web/machinetag.json b/dark-web/machinetag.json new file mode 100644 index 0000000..6a9ab48 --- /dev/null +++ b/dark-web/machinetag.json @@ -0,0 +1,140 @@ +{ + "namespace": "dark-web", + "expanded": "Dark Web", + "description": "Criminal motivation on the dark web: A categorisation model for law enforcement. ref: Janis Dalins, Campbell Wilson, Mark Carman. Taxonomy updated by MISP Project", + "version": 1, + "predicates": [ + { + "value": "topic", + "description": "Topic associated with the materials tagged", + "expanded": "Topic" + }, + { + "value": "motivation", + "description": "Motivation with the materials tagged", + "expanded": "Motivation" + } + ], + "values": [ + { + "predicate": "topic", + "entry": [ + { + "value": "drugs-narcotics", + "expanded": "Drugs/Narcotics", + "description": "Illegal drugs/chemical compounds for consumption/ingestion - either via blanket unlawfulness (e.g. proscribed drugs) or via unlawful access (e.g. prescription-only/restricted medications sold without lawful accessibility)." + }, + { + "value": "extremism", + "expanded": "Extremism", + "description": "Illegal or ‘of concern’ levels of extremist ideology. Note this does not provide blanket coverage of fundamentalist ideologies and dogma - only those associated with illegal acts. Socialist/anarchist/religious materials (for example) will not be included unless inclusive or indicative of associated illegal conduct, such as hate crimes." + }, + { + "value": "finance", + "expanded": "Finance", + "description": "Any monetary/currency/exchangeable materials. Includes carding, Bitcoin, Litecoin etc." + }, + { + "value": "hacking", + "expanded": "Hacking", + "description": "Materials relating to the illegal access to or alteration of data and/or electronic services." + }, + { + "value": "identification-credentials", + "expanded": "Identification/Credentials", + "description": "Materials used for providing/establishing identification with third parties. Examples include passports, driver licenses and login credentials." + }, + { + "value": "intellectual-property-copyright-materials", + "expanded": "Intellectual Property/Copyright Materials", + "description": "Otherwise lawful materials stored, transferred or made available without consent of their legal rights holders." + }, + { + "value": "pornography-adult", + "expanded": "Pornography - Adult", + "description": "Lawful, ethical pornography (i.e. involving only consenting adults)." + }, + { + "value": "pornography-child-exploitation", + "expanded": "Pornography - Child (Child Exploitation)", + "description": "Child abuse materials (aka child pornography), including 'fantasy' fiction materials, CGI. Also includes the provision/offering of child abuse materials and/or activities" + }, + { + "value": "pornography-illicit-or-illegal", + "expanded": "Pornography - Illicit or Illegal", + "description": "Illegal pornography NOT including children/child abuse. Includes bestiality, stolen/revenge porn, hidden cameras etc." + }, + { + "value": "search-engine-index", + "expanded": "Search Engine/Index", + "description": "Site providing links/references to other sites/services. Referred to as a ‘nexus’ by (Moore and Rid, 2016)" + }, + { + "value": "unclear", + "expanded": "Unclear", + "description": "Unable to completely establish topic of material." + }, + { + "value": "violence", + "expanded": "Violence", + "description": "Materials relating to violence against persons or property." + }, + { + "value": "weapons", + "expanded": "Weapons", + "description": "Materials specifically associated with materials and/or items for use in violent acts against persons or property. Examples include firearms and bomb-making ingredients." + }, + { + "value": "other-not-illegal", + "expanded": "Other not illegal", + "description": "Material not of interest to law enforcement - e.g. personal sites, Facebook mirrors." + } + ] + }, + { + "predicate": "motivation", + "entry": [ + { + "value": "education-training", + "expanded": "Education & Training", + "description": "Materials providing instruction - e.g. ‘how to’ guides" + }, + { + "value": "file-sharing", + "expanded": "File Sharing", + "description": "General file sharing, typically (but not limited to) movie/image sharing" + }, + { + "value": "forum", + "expanded": "Forum", + "description": "Sites specifically designed for multiple users to communicate as peers" + }, + { + "value": "general", + "expanded": "General", + "description": "Materials not covered by the other motivations. Typically, materials of a nature not of interest to law enforcement. For example, personal biography sites." + }, + { + "value": "information-sharing-reportage", + "expanded": "Information Sharing/Reportage", + "description": "Journalism/reporting on topics. Can include biased coverage, but obvious propaganda materials are covered by Recruitment/Advocacy." + }, + { + "value": "marketplace-for-sale", + "expanded": "Marketplace/For Sale", + "description": "Services/goods for sale, regardless of means of payment." + }, + { + "value": "recruitment-advocacy", + "expanded": "Recruitment/Advocacy", + "description": "Propaganda" + }, + { + "value": "system-placeholder", + "expanded": "System/Placeholder", + "description": "Automatically generated content, not designed for any identifiable purpose other than diagnostics - e.g. “It Works” message provided by default by Apache2" + } + ] + } + ] +}