HackerScope：大规模黑客在线生态系统的动态
HackerScope: The Dynamics of a Massive Hacker Online Ecosystem
摘要：
恶意软件的作者并没有像人们想象的那样隐藏得那么多：他们有一个可见的在线足迹。除了在线论坛，这种足迹还出现在软件开发平台上，作者在这些平台上创建了可公开访问的恶意软件存储库，以进行共享和协作。除了最近的几次努力之外，这一群体的存在和动态受到的关注令人惊讶地有限。我们工作的目标是分析这个黑客生态系统，以便：（a）了解他们的合作模式，（b）识别和分析其最有影响力的作者。我们开发了HackerScope，这是一种分析黑客生态系统动态的系统方法。利用我们有针对性的数据汇集，我们对GitHub上的7389名恶意软件库作者进行了广泛的研究，并将其与他们在四个安全论坛上的活动相结合。从建模的角度来看，我们使用三种网络表示来研究生态系统：（a）作者-作者网络，（b）作者-存储库网络和（c）跨平台egonets。我们的分析得出了以下关键观察结果：（a）生态系统正在加速增长，因为每年新的恶意软件作者的数量每两年增加两倍，（b）它是高度协作的，比其他GitHub作者更是如此，（c）它包括有影响力的专业黑客。我们发现30位作者在GitHub和我们的安全论坛上维护着一个在线“品牌”。我们的研究是使用公共在线信息了解恶意黑客社区的重要一步。
英文摘要：
Authors of malicious software are not hiding as much as one would assume: they have a visible online footprint. Apart from online forums, this footprint appears in software development platforms, where authors create publicly-accessible malware repositories to share and collaborate. With the exception of a few recent efforts, the existence and the dynamics of this community has received surprisingly limited attention. The goal of our work is to analyze this ecosystem of hackers in order to: (a) understand their collaborative patterns, and (b) identify and profile its most influential authors. We develop HackerScope, a systematic approach for analyzing the dynamics of this hacker ecosystem. Leveraging our targeted data collection, we conduct an extensive study of 7389 authors of malware repositories on GitHub, which we combine with their activity on four security forums. From a modeling point of view, we study the ecosystem using three network representations: (a) the author-author network, (b) the author-repository network, and (c) cross-platform egonets. Our analysis leads to the following key observations: (a) the ecosystem is growing at an accelerating rate as the number of new malware authors per year triples every 2 years, (b) it is highly collaborative, more so than the rest of GitHub authors, and (c) it includes influential and professional hackers. We find 30 authors maintain an online "brand" across GitHub and our security forums. Our study is a significant step towards using public online information for understanding the malicious hacker community.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
