By Robert H. Sloan • Richard Warner

 Going beyond current books on privacy and security, Unauthorized Access: The Crisis in Online Privacy and Security proposes specific solutions to public policy issues about online privacy and security. Requiring no technical or legal expertise, the book explains complicated concepts in clear, straightforward language. The authors two renowned experts on computer security and law explore the well-established connection between social norms, privacy, security, and technological structure. This approach is the key to understanding information security and informational privacy, providing a practical framework to address ethical and legal issues. The authors also discuss how rapid technological developments have created novel situations that lack relevant norms and present ways to develop these norms for protecting informational privacy and ensuring sufficient information security. Bridging the gap among computer scientists, economists, lawyers, and public policymakers, this book provides technically and legally sound public policy guidance about online privacy and security. It emphasizes the need to make trade-offs among the complex concerns that arise in the context of online privacy and security.

Boca Raton, FL;  London; New York;  CRC Press, 2017. 401p.

By Asmita Mallick and Prithwish Ganguli

Toxic Panda is a sophisticated Android banking trojan that targets users in Europe, Latin America, and Southeast Asia. Using advanced techniques like account takeover (ATO) and on-device fraud (ODF), it bypasses security mechanisms, including multi-factor authentication, to steal sensitive data and conduct unauthorized transactions. The malware's ability to manipulate user inputs and intercept one-time passwords makes it a significant threat. This paper explores the implications of ToxicPanda, highlights the evolving landscape of cybercrime, and offers insights into preventive measures and legal frameworks to combat emerging threats.

Unpublished paper, 2024.

By Evany Anne Moses,  M. Brindha,  N. Sivaukumaran

In recent years, the demand for intelligent surveillance systems has grown significantly due to the increasing need for enhanced security in public and private spaces. This journal presents a comprehensive approach that integrates advanced deep learning techniques for anomaly detection, violence recognition, and person re-identification in surveillance videos. The proposed system leverages a hybrid model combining ResNet50 and 3D Convolutional Neural Networks (CNNs) to accurately detect violent activities in real time. Additionally, the system includes anomaly detection to identify unusual patterns in the video feed that may signal potential security threats. The system further incorporates YOLO for high-precision object detection, DeepSort for robust tracking, and OpenPose for pose estimation, enabling real-time monitoring and accurate identification of individuals across multiple frames. Experimental results demonstrate that the integrated system outperforms traditional methods in terms of accuracy, efficiency, and scalability, making it a powerful tool for modern surveillance applications. This work highlights the potential of combining multiple deep-learning approaches to create a more effective and reliable surveillance system capable of addressing diverse security challenges.

Unpublished paper, 2024. 34p.

By Ernesto Lopez, Robert Boxerman and Keley CundiffEErnes

Since shortly after the onset of the COVID-19 pandemic, the Council on Criminal Justice has tracked changing rates of violent and property crime in large cities across the United States. The pandemic, as well as the social justice protests during the summer of 2020 and other factors, have altered the motives, means, and opportunities to commit crimes.

Prepared for the Council on Criminal Justice’s Crime Trends Working Group, this report focuses on trends in shoplifting, a subset of retail theft which, in turn, is a subset of overall larceny-theft. The FBI defines larceny-theft as the unlawful taking of property without force, violence, or fraud.

The report looks at shoplifting patterns from before the onset of the COVID-19 pandemic through mid-year 2023. To date, attempts to measure changes in retail theft, including organized retail theft, have relied on retail industry data5 or have been limited to one state.

The city-specific data included in this report are drawn from open-data sources from 24 cities that, over the past five years, have consistently reported specific shoplifting data. Additional data come from the U.S. Justice Department’s National Incident-Based Reporting Program (NIBRS).7 The NIBRS data include a sample of 3,812 local law enforcement agencies. The analyses examine the changing frequency of reported shoplifting, trends in other property offenses, changes in the value of stolen goods, offenses that co-occur with shoplifting, and the number of people involved in each incident.

This report does not discuss in detail shoplifting data from the National Retail Federation’s Retail Security Survey.8 The 2021 survey (data ending in 2020) was the last year the survey reported figures on the number of incidents and the value of stolen goods. Because of this change, data from the survey could not be included.

Due to a lack of available data, this report does not examine factors that could be influencing the trends. Potential factors include changes in retailers’ anti-theft measures and changes in how retailers report shoplifting to law enforcement, which could be based on their perceptions of the extent to which local police or prosecutors will apprehend suspects and pursue criminal charges. Because these data rely on reported incidents, they almost certainly undercount total shoplifting. The findings presented here should be viewed with these considerations in mind.

Washington, DC: Council on Criminal Justice, 2023. 8p.

By U.S. Government Accountability Office

   The U.S. and its global partners are experiencing the effects of a massive cybercrime wave, which is growing in frequency and scale. In 2021, the Federal Bureau of Investigation received a record number of cybercrime complaints, over 840,000, with potential losses exceeding $6.9 billion. Further, in 2022, the intelligence community noted an increase in ransomware attacks by transnational criminals, which threaten to cause disruptions of critical services worldwide. GAO was asked to review federal efforts to build the capacity of allies and partner nations to combat cybercrime. This report’s specific objectives were to (1) describe challenges in building global capacity to combat cybercrime, and (2) determine actions selected federal agencies are taking to build foreign nations’ capacity to combat cybercrime and the extent to which they are evaluating the effectiveness of their efforts. GAO interviewed agency officials and convened a panel of experts representing entities focused on capacity building to combat global cybercrime. GAO also analyzed documentation from State, DOJ, and DHS, which provide the majority of U.S. capacity building assistance. What GAO Recommends GAO is making one recommendation to State to conduct a comprehensive evaluation of capacity building efforts to counter cybercrime. State concurred with the recommendation. 

 Washington, DC: GAO, 2023. 49p.