Cyber-crime Science = Crime Science + Information Security

Cyber-crime Science is an emerging area of study aiming to prevent cyber-crime by combining security protection techniques from Information Security with empirical re-search methods used in Crime Science. Information Se-curity research has developed techniques for protecting the confidentiality, integrity, and availability of informa-tion assets but is less strong on the empirical study of the effectiveness of these techniques. Crime Science stud-ies the effect of crime prevention techniques empirically in the real world, and proposes improvements to these techniques based on this. Combining both approaches, Cyber-crime Science transfers and further develops Infor-mation Security techniques to prevent cyber-crime, and empirically studies the effectiveness of these techniques in the real world. In this paper we review the main contri-butions of Crime Science as of today, illustrate its appli-cation to typical Information Security problems, namely phishing and on-line auction fraud, explore the interdisci-plinary structure of Cyber-crime Science, and present an agenda for research in Cyber-crime Science in the form of a set of suggested research questions. [C.2.0] Computer-communication networks General [Security and protection] [K.4.1] Computers and society Public Policy Issues [Abuse and crime involving computers] [K.6.5] Management of computing and information sys-tems Security and Protection