Kui keegi Eestis võtab nõuks kirjutada doktoritöö kriminoloogia valdkonnas, siis see on kultuuriloos tähelepanuväärne sündmus. Nii on Tartu Ülikooli värske filosoofiadoktor Kristjan Kikerpill igal juhul tunnustuse ära teeninud ning tema väitekiri tähelepanu väärt. Tekst on vabalevis ja pikki kommentaare ei vaja. Lugemishuvi võiks see pakkuda kõikidele turvalisusehuvilistele. Kindlasti aga politseinikele ja (kriminaal)poliitika kujundajatele.

Kontekstiks:

Consequently, this means that violating social norms, including committing crimes, has also been adapted to the newer way of being. Since crime is a socially constructed phenomenon (Posick, 2018), it goes where people go.

Küberkuriteod vajavad inimeste abi:

According to a recent report (Proofpoint, 2019: 19), 99% of cybercrime threats require some human interaction – opening a file, following a link or opening a document – by the recipient to be successful. This means that the malicious use of social engineering, which is defined in modern security discussions as acts that influence a person to take an action that is not in their best interests (see 2.3 below; Hadnagy, 2018; Hatfield, 2018), is key to criminals’ success (Proofpoint, 2019).

Autor väidab:

In my thesis, I argue that this approach, which I call crime-as-communication, can be provided by combining aspects of environmental criminology (how criminals and crime targets converge in space and time: Felson & Cohen, 1979) with ideas from the disciplines of law (how a crime target’s “will to act” is envisioned and understood in criminal offences such as fraud and extortion), communication (how meaning is encoded, transmitted and understood: Hall, 1973; Levine, 2019) and social psychology (what techniques are used to influence people to gain their compliance in crimes requiring action by the victim: Cialdini, 2009) as well as media sociology and the sociology of deviance.

Väitekirja eesmärk:

Thus, the aim of my thesis is to explain the role and importance of interpreting messages-in-context to distinguish potentially criminal input from all received input for the purpose of preventing victimisation from social engineering attacks.

Keskne probleem:

The core problem under discussion in my thesis is how insights from communication can inform, instruct and potentially mitigate the negative outcomes from cybercriminal acts targeting individuals.

Lugemishuvi suurendamiseks:

I have previously provided the theoretical background, results and discussion for establishing the crime-ascommunication approach. Understanding the strategies of persuasion and coercion that perpetrators rely on to influence recipients into taking action that is harmful to them and knowing how these strategies appear in socially engineered messages is the key to detecting and countering incoming crime(-as-communication) attempts.

KIKERPILL, K. (2022) Crime-as-communication: detecting diagnostically useful information from the content and context of social engineering attacks.