A Survey of Malware Exploit Kits: Economic Influences of Exploit-as-a-Service
Primary Investigator:
Research Independant
Ryan Gabet
Abstract
Malware economics as discussed in this research is the concept of revenue generated as the result of the development, purchase, sale, or deployment of malware or distribution methods, and is part of an ever-expanding illicit market. Evolving information technology provides a wealth of information up for grabs, which can be sold for a premium. Similarly, evolving security presents challenges, which stand between hacker and personal information goldmines. As such, the resulting demand for more sophisticated malware or delivery method to bypass anti-malware software has opened the door for technically advanced cybercriminals to leverage their skillset in a way that provides long-term revenue. This study analyzes the concept of Exploit-as-a-Service (EaaS) as it pertains to malware and network security, focusing primarily on Exploit Kits (EKs) and the economic factors of exploit as a service, if any, that serve as a major influence for the prevalence of EKs and EaaS.