add: [dark-web] Criminal motivation on the dark web: A categorisation model for law enforcement

Ref:

Criminal motivation on the dark web: A categorisation model for law
enforcement
Janis Dalins, Campbell Wilson, Mark Carman

MANIFEST.json

@@ -454,11 +454,16 @@
       "version": 1,
       "name": "ransomware",
       "description": "Ransomware is used to define ransomware types and the elements that compose them."
+    },
+    {
+      "version": 1,
+      "name": "dark-web",
+      "description": "Criminal motivation on the dark web: A categorisation model for law enforcement. ref: Janis Dalins, Campbell Wilson, Mark Carman. Taxonomy updated by MISP Project."
     }
   ],
   "path": "machinetag.json",
   "url": "https://raw.githubusercontent.com/MISP/misp-taxonomies/master/",
   "description": "Manifest file of MISP taxonomies available.",
   "license": "CC-0",
-  "version": "20190410"
+  "version": "20190517"
 }

dark-web/machinetag.json

@@ -0,0 +1,140 @@
+{
+  "namespace": "dark-web",
+  "expanded": "Dark Web",
+  "description": "Criminal motivation on the dark web: A categorisation model for law enforcement. ref: Janis Dalins, Campbell Wilson, Mark Carman. Taxonomy updated by MISP Project",
+  "version": 1,
+  "predicates": [
+    {
+      "value": "topic",
+      "description": "Topic associated with the materials tagged",
+      "expanded": "Topic"
+    },
+    {
+      "value": "motivation",
+      "description": "Motivation with the materials tagged",
+      "expanded": "Motivation"
+    }
+  ],
+  "values": [
+    {
+      "predicate": "topic",
+      "entry": [
+        {
+          "value": "drugs-narcotics",
+          "expanded": "Drugs/Narcotics",
+          "description": "Illegal drugs/chemical compounds for consumption/ingestion - either via blanket unlawfulness (e.g. proscribed drugs) or via unlawful access (e.g. prescription-only/restricted medications sold without lawful accessibility)."
+        },
+        {
+          "value": "extremism",
+          "expanded": "Extremism",
+          "description": "Illegal or ‘of concern’ levels of extremist ideology. Note this does not provide blanket coverage of fundamentalist ideologies and dogma - only those associated with illegal acts. Socialist/anarchist/religious materials (for example) will not be included unless inclusive or indicative of associated illegal conduct, such as hate crimes."
+        },
+        {
+          "value": "finance",
+          "expanded": "Finance",
+          "description": "Any monetary/currency/exchangeable materials. Includes carding, Bitcoin, Litecoin etc."
+        },
+        {
+          "value": "hacking",
+          "expanded": "Hacking",
+          "description": "Materials relating to the illegal access to or alteration of data and/or electronic services."
+        },
+        {
+          "value": "identification-credentials",
+          "expanded": "Identification/Credentials",
+          "description": "Materials used for providing/establishing identification with third parties. Examples include passports, driver licenses and login credentials."
+        },
+        {
+          "value": "intellectual-property-copyright-materials",
+          "expanded": "Intellectual Property/Copyright Materials",
+          "description": "Otherwise lawful materials stored, transferred or made available without consent of their legal rights holders."
+        },
+        {
+          "value": "pornography-adult",
+          "expanded": "Pornography - Adult",
+          "description": "Lawful, ethical pornography (i.e. involving only consenting adults)."
+        },
+        {
+          "value": "pornography-child-exploitation",
+          "expanded": "Pornography - Child (Child Exploitation)",
+          "description": "Child abuse materials (aka child pornography), including 'fantasy' fiction materials, CGI. Also includes the provision/offering of child abuse materials and/or activities"
+        },
+        {
+          "value": "pornography-illicit-or-illegal",
+          "expanded": "Pornography - Illicit or Illegal",
+          "description": "Illegal pornography NOT including children/child abuse. Includes bestiality, stolen/revenge porn, hidden cameras etc."
+        },
+        {
+          "value": "search-engine-index",
+          "expanded": "Search Engine/Index",
+          "description": "Site providing links/references to other sites/services. Referred to as a ‘nexus’ by (Moore and Rid, 2016)"
+        },
+        {
+          "value": "unclear",
+          "expanded": "Unclear",
+          "description": "Unable to completely establish topic of material."
+        },
+        {
+          "value": "violence",
+          "expanded": "Violence",
+          "description": "Materials relating to violence against persons or property."
+        },
+        {
+          "value": "weapons",
+          "expanded": "Weapons",
+          "description": "Materials specifically associated with materials and/or items for use in violent acts against persons or property. Examples include firearms and bomb-making ingredients."
+        },
+        {
+          "value": "other-not-illegal",
+          "expanded": "Other not illegal",
+          "description": "Material not of interest to law enforcement - e.g. personal sites, Facebook mirrors."
+        }
+      ]
+    },
+    {
+      "predicate": "motivation",
+      "entry": [
+        {
+          "value": "education-training",
+          "expanded": "Education & Training",
+          "description": "Materials providing instruction - e.g. ‘how to’ guides"
+        },
+        {
+          "value": "file-sharing",
+          "expanded": "File Sharing",
+          "description": "General file sharing, typically (but not limited to) movie/image sharing"
+        },
+        {
+          "value": "forum",
+          "expanded": "Forum",
+          "description": "Sites specifically designed for multiple users to communicate as peers"
+        },
+        {
+          "value": "general",
+          "expanded": "General",
+          "description": "Materials not covered by the other motivations. Typically, materials of a nature not of interest to law enforcement.  For example, personal biography sites."
+        },
+        {
+          "value": "information-sharing-reportage",
+          "expanded": "Information Sharing/Reportage",
+          "description": "Journalism/reporting on topics. Can include biased coverage, but obvious propaganda materials are covered by Recruitment/Advocacy."
+        },
+        {
+          "value": "marketplace-for-sale",
+          "expanded": "Marketplace/For Sale",
+          "description": "Services/goods for sale, regardless of means of payment."
+        },
+        {
+          "value": "recruitment-advocacy",
+          "expanded": "Recruitment/Advocacy",
+          "description": "Propaganda"
+        },
+        {
+          "value": "system-placeholder",
+          "expanded": "System/Placeholder",
+          "description": "Automatically generated content, not designed for any identifiable purpose other than diagnostics - e.g. “It Works” message provided by default by Apache2"
+        }
+      ]
+    }
+  ]
+}