The Hacker Business Model Canvas
- 1. The Hacker Business Model Canvas REMCO VERHOEF CHO DUTCHSEC REMCO.VERHOEF@DUTCHSEC.COM +31 6 21563725 Leading in Data and Context-driven CyberSecurity
- 2. About DutchSec Founded in 2017 Team of 20 specialists Security (Offensive, Defensive and Intelligence) Software to collect, analyse and train machine learning models Applied Machine Learning and Big data Located in Utrecht
- 3. Mission
- 4. The Hacker Business Model
- 5. bbbu
- 6. How? Key Partners * Developers * Hackers * Moneymules * Legal companies (advertising, money laundering)
- 7. How? Key Activities * Software development * Vulnerability Research * Operation / Maintenance * Marketing * Promotion * Distribution * Customer service
- 8. How?Key Resources * (Opensource-) Software * Platform / product(s) * Developers * Infrastructure (botnet) * Automation * Targeting
- 9. What? Value Proposition * Espionage (blueprints, tenders) * Ransom (data) * Extortion (availability) * Trustworthyness * As-a-service
- 10. Who? Customer Relationship * Support service (email, chat) * Communities * Forums
- 11. Who?
- 12. Who? Channels * (Spear-) Phishing campaigns * Hacking (vulnerabilities) * Automated (worm) infection (eg Wannacry) * Reselling network
- 13. Who?Customer * Internal actors * Cyber vandals / script kiddies * State actors * Professional criminals * Terrorists * Hacktivists
- 14. Why?Costs * Servers and storage * Development team * System management * Software (Exploit kit(s)) * Operations (ads, infrastructure) * Cash withdrawal * Distributors
- 15. Why? Revenues * Several plans (as a service) * Product licences * Victim payouts * Hacker for hire
- 17. Disruption
- 18. Classic Defence
- 19. * Education * Maintenance (upgrading, defence-in-depth) * Monitor (anomaly detection) * Fight (takedown) * Trust (need to know payouts work) * Deception (attacker don’t know what to trust)
- 20. Questions? ANY