| 摘要 |
A system for electronic crime reduction is provided, comprising a computer system, a database, a malware de-compiler, a malware parser, and an inference engine. The database contains information that associates electronic crime attack signature data with at least one of an individual, a group, and a location. The malware de-compiler, when executed on the computer system, translates a first malware executable to an assembly language version. The first malware is associated with an electronic crime that has been committed. The malware parser, when executed on the computer system, analyzes the assembly language version to identify distinctive coding preferences used to develop the first malware. The inference engine, when executed on the computer system, analyzes the distinctive coding preferences identified by the malware parser application in combination with searching the database to identify one of an individual, a group, and a location associated with the electronic crime. |
| 主权项 |
1. A method of mitigating electronic crime losses, comprising:
maintaining a database that associates electronic crime attack signature data related to at least one of a monetization phase and a laundering phase of an electronic crime business process with at least one of an individual, a group, and a geographical location; analyzing, by one or more applications stored in a non-transitory memory and executed by a processor, at least one of a technique of monetization used to conduct an electronic crime or a technique of laundering used to conduct the electronic crime; and identifying, by an inference engine application stored in a non-transitory memory and executed by a processor, at least one of a person of potential interest and a group of potential interest in the electronic crime based on the analyzing and on the database. |
