Geoff Voelker

For nearly two decades our group has undertaken an evidence-based approach to measure and analyze various kinds of abuse and cybercrime on the Internet, and develop and evaluate approaches to undermine such activities.  In this talk I will describe our evidence-based approach and present a selection of recent work including email account "hack-for-hire" blackmarket services, domain name hijacking that is an accidental byproduct of undocumented operational practices between domain registrars and registries, and the results of an eight-month randomized controlled experiment evaluating the efficacy of annual cybersecurity awareness training and embedded anti-phishing training exercises.