Intelligence and Security Informatics Data Sets
Data Infrastructure Building Blocks for ISI. A Project of the University of Arizona (NSF #ACI-1443019), Drexel University,
University of Virginia, University of Texas at Dallas, and University of Utah
Dark Net Markets (DNMs)
Dark Net Markets are online cyber criminal platforms used for advertising, buying and selling illegal goods including a significant number of cybersecurity-related tools. Since DNMs are relatively new compared to other platforms, there is more untapped research opportunities in this area. Since shutdown of Alphabay darknet market by FBI, Dream market has been the largest Dark Net Market. Accordingly, the Artificial Intelligence Lab at the University of Arizona has collected this market in 2016 and 2017. This collection contains data about products advertised on Dark Net Markets including (product name, category, description, shipping_options, shipping departure, shipping destination, price, and payment method) and sellers including (seller_name, member_since(date), pgp key, seller's description, feedback rating). Malicious products in DNMs are of significant importance because some of the cyber-security related products advertised on them cannot be found in other platforms such as forums in hacker community. These malicious products can be used by hackers as potential cyber threats to cybersecurity.
DreamMarket_2017.zip (24.7 MB)
Dark Net Forums (DNFs)
Dark Net Forums are online cyber criminal platforms that are often associated with the Dark Net Markets. After the international FBI operation in 2017, which temporarily led to the closure of many market places, cyber criminals found it more convenient to interact within anonymous forums. Currently, most DNMs host their own forum in which cyber criminals can support each other and communicate to perform their illegal transactions. We have identified three large-scale DNFs in 2018 and collected the posts created by cyber criminals. Such forums can be used for a variety of cyber threat intelligence tasks and identifying social networks among cyber criminals. Such forums are useful for key Seller identification to recognize sellers with the most impact on these markets, cyber threat identification via detecting malicious products advertised on DNFs, and also putting a face on the administrators of these platforms. This dataset consists of 128,540 posts in English and Russian. Each post has the following fields: post ID, thread ID, thread title, URL, sub_forum, author name, author's membership, author's join date, author's reputation, post date, number of likes, and post content.
DNF_2019.zip (39.5 MB)