Cyberentrepreuneur profiles based on the vulnerabilities they exploit and sell

The project aims to distinguish profiles of software vendors that allow the exploitation of computer security vulnerabilities. Data about the vendors and the vulnerabilities they exploit in their software will be collected from illicit software sales forums. The vulnerabilities will be classified according to what they can do when exploited. Then profiles will be developed based on the different types of vulnerabilities sold by each vendor. The profiles will be developed using artificial intelligence and interpreted with a criminological perspective. The creation of profiles allows the production of cyber security intelligence and contributes to the prevention of cyber attacks. The advantage for the partner organization lies in the integration of a criminological perspective to the technical analyses. Through this research, high-value cyber threat intelligence will be integrated in the product, thus better protecting the partner’s clients, including Canadian enterprises.

Faculty Supervisor:

Masarah Paquet-Clouston

Student:

Partner:

Secureworks

Discipline:

Sociology

Sector:

Professional, scientific and technical services

University:

Université de Montréal

Program: