IDEAS home Printed from https://ideas.repec.org/p/cpb/discus/306.html

What drives cybercrime? Empirical evidence from DDoS attacks

Author

Listed:
  • Bastiaan Overvest
  • Bas Straathof

Abstract

Distributed Denial of Service (DDoS) attacks are a frequently occurring type of cybercrime, with potentially large costs to the real economy. We propose a simple model of the size and direction of DDoS attacks. The main predictions of the model are that effective botnets are located in countries with many internet users and high internet speeds, and that the most attractive targets of DDoS attacks are countries with many internet users. We use a theoretical framework to derive a structural equation that resembles the ”gravity equations” common in the literature on international trade. The empirical results are consistent with the predictions of the model. The number of internet users is strongly related to the number of international DDoS attacks: our results suggest that a ten percent increase in the number of internet users worldwide would raise the total number of DDoS attacks by eight percent. Bandwidth in the country of origin is also significantly related to attacks, but quantitatively not very important. The vulnerability of computers does not seem influential. We use international data from www.digitalattackmap.com on 55,000 DDoS attacks in 2013 and 2014. The vast majority of attacks originate from the United States (6,256 attacks in 2013/2014) and China (2851 attacks). The Netherlands ranks third with 834 attacks. We estimate an econometric model with economic and technological variables in order to explain observed DDoS patterns. Our model is inspired by models from the international trade literature that explain trade patterns. Trade relations are significantly related to attacks, while other economic factors including GDP per capita do not appear to play a role. The geographical distance between countries is not relevant, while historical ties between countries are significantly related to the number of attacks. This paper is one of the first to explore possible determinants of cybercrime at an aggregate level. We hope that by uncovering some general patterns in the data, our research may contribute to the growing and exciting field of cybersecurity economics.

Suggested Citation

  • Bastiaan Overvest & Bas Straathof, 2015. "What drives cybercrime? Empirical evidence from DDoS attacks," CPB Discussion Paper 306, CPB Netherlands Bureau for Economic Policy Analysis.
    • Handle: RePEc:cpb:discus:306
    as

    Download full text from publisher

    File URL: https://www.cpb.nl/system/files/cpbmedia/publicaties/download/cpb-discussion-paper-306-what-drives-cybercrime-empirical-evidence-ddos-attacks.pdf
    Download Restriction: no
    ---><---

    References listed on IDEAS

    as
    1. Mayer, Thierry & Zignago, Soledad, 2006. "Notes on CEPII’s distances measures," MPRA Paper 26469, University Library of Munich, Germany.
    2. Martijn Burger & Frank van Oort & Gert-Jan Linders, 2009. "On the Specification of the Gravity Model of Trade: Zeros, Excess Zeros and Zero-inflated Estimation," Spatial Economic Analysis, Taylor & Francis Journals, vol. 4(2), pages 167-190.
    3. Michel J. G. van Eeten & Johannes M. Bauer & Hadi Asghari & Shirin Tabatabaie, 2010. "The Role of Internet Service Providers in Botnet Mitigation: An Empirical Analysis Based on Spam Data," OECD Science, Technology and Industry Working Papers 2010/5, OECD Publishing.
    4. Elhanan Helpman & Marc Melitz & Yona Rubinstein, 2008. "Estimating Trade Flows: Trading Partners and Trading Volumes," The Quarterly Journal of Economics, President and Fellows of Harvard College, vol. 123(2), pages 441-487.
    5. Susan Athey & Scott Stern, 2015. "The Nature and Incidence of Software Piracy: Evidence from Windows," NBER Chapters, in: Economic Analysis of the Digital Economy, pages 443-477, National Bureau of Economic Research, Inc.
    6. A. Colin Cameron & Pravin K. Trivedi, 2010. "Microeconometrics Using Stata, Revised Edition," Stata Press books, StataCorp LLC, number musr, March.
    7. Acemoglu, Daron & Malekian, Azarakhsh & Ozdaglar, Asu, 2016. "Network security and contagion," Journal of Economic Theory, Elsevier, vol. 166(C), pages 536-585.
    8. J. M. C. Santos Silva & Silvana Tenreyro, 2006. "The Log of Gravity," The Review of Economics and Statistics, MIT Press, vol. 88(4), pages 641-658, November.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Corbet, Shaen & Gurdgiev, Constantin, 2019. "What the hack: Systematic risk contagion from cyber events," International Review of Financial Analysis, Elsevier, vol. 65(C).
    2. Milena Dinkova & Ramy El-Dardiry & Bastiaan Overvest, 2020. "Cyber incidents, security measures and financial returns: Empirical evidence from Dutch firms," CPB Discussion Paper 411, CPB Netherlands Bureau for Economic Policy Analysis.
    3. Milena Dinkova & Ramy El-Dardiry & Bastiaan Overvest, 2020. "Cyber incidents, security measures and financial returns: Empirical evidence from Dutch firms," CPB Discussion Paper 411.rdf, CPB Netherlands Bureau for Economic Policy Analysis.
    4. Shuai Chen & Mengmeng Hao & Fangyu Ding & Dong Jiang & Jiping Dong & Shize Zhang & Qiquan Guo & Chundong Gao, 2023. "Exploring the global geography of cybercrime and its driving forces," Humanities and Social Sciences Communications, Palgrave Macmillan, vol. 10(1), pages 1-10, December.
    5. repec:ofr:report:17-2 is not listed on IDEAS

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Bastiaan Overvest & Bas Straathof, 2015. "What drives cybercrime? Empirical evidence from DDoS attacks," CPB Discussion Paper 306.rdf, CPB Netherlands Bureau for Economic Policy Analysis.
    2. Karpaty, Patrik & Gustavsson Tingvall, Patrik, 2011. "Offshoring of Services and Corruption: Do Firms Escape Corrupt Countries?," Working Papers 2011:2, Örebro University, School of Business, revised 28 May 2012.
    3. Pascal L. Ghazalian, 2015. "The New Tomato Suspension Agreement: What Are the Implications for Trade Flows?," Canadian Journal of Agricultural Economics/Revue canadienne d'agroeconomie, Canadian Agricultural Economics Society/Societe canadienne d'agroeconomie, vol. 63(3), pages 359-380, September.
    4. Martin Grančay & Nóra Grančay & Jana Drutarovská & Ladislav Mura, 2015. "Gravitačný model zahraničného obchodu českej a slovenskej republiky 1995-2012: ako sa zmenili determinanty obchodu? [Gravity Model of Trade of the Czech and Slovak Republics 1995-2012: How Have Det," Politická ekonomie, Prague University of Economics and Business, vol. 2015(6), pages 759-777.
    5. repec:spo:wpmain:info:hdl:2441/53r60a8s3kup1vc9ji21mi9p3 is not listed on IDEAS
    6. Heyman Fredrik & Tingvall Patrik Gustavsson, 2015. "The Dynamics of Offshoring and Institutions," The B.E. Journal of Economic Analysis & Policy, De Gruyter, vol. 15(4), pages 1975-2016, October.
    7. Elisaveta Archanskaia & Guillaume Daudin, 2012. "Heterogeneity and the Distance Puzzle," Documents de Travail de l'OFCE 2012-17, Observatoire Francais des Conjonctures Economiques (OFCE).
    8. Adrián Rabadán & Ángela Triguero, 2021. "Influence of food safety standards on trade: Evidence from the pistachio sector," Agribusiness, John Wiley & Sons, Ltd., vol. 37(3), pages 489-514, July.
    9. Valeria Costantini & Francesco Crespi, 2015. "European enlargement policy, technological capabilities and sectoral export dynamics," The Journal of Technology Transfer, Springer, vol. 40(1), pages 25-69, February.
    10. Wessel, Jan, 2019. "Evaluating the transport-mode-specific trade effects of different transport infrastructure types," Transport Policy, Elsevier, vol. 78(C), pages 42-57.
    11. Gianluca Orefice, 2015. "International migration and trade agreements: The new role of PTAs," Canadian Journal of Economics, Canadian Economics Association, vol. 48(1), pages 310-334, February.
    12. French, Scott, 2016. "The composition of trade flows and the aggregate effects of trade barriers," Journal of International Economics, Elsevier, vol. 98(C), pages 114-137.
    13. Francois, Joseph & Manchin, Miriam, 2013. "Institutions, Infrastructure, and Trade," World Development, Elsevier, vol. 46(C), pages 165-175.
    14. Michele Fratianni & Francesco Marchionne, 2012. "Trade Costs and Economic Development," Economic Geography, Clark University, vol. 88(2), pages 137-163, April.
    15. Kareem, Fatima Olanike & Martinez-Zarzoso, Inmaculada & Brümmer, Bernhard, 2016. "Fitting the Gravity Model when Zero Trade Flows are Frequent: a Comparison of Estimation Techniques using Africa's Trade Data," GlobalFood Discussion Papers 230588, Georg-August-Universitaet Goettingen, GlobalFood, Department of Agricultural Economics and Rural Development.
    16. Lücke, Matthias & Stöhr, Tobias, 2015. "Heterogeneous Immigrants and Foreign Direct Investment: The Role of Language Skills," VfS Annual Conference 2015 (Muenster): Economic Development - Theory and Policy 113191, Verein für Socialpolitik / German Economic Association.
    17. Natale, Fabrizio & Borrello, Alessandra & Motova, Arina, 2015. "Analysis of the determinants of international seafood trade using a gravity model," Marine Policy, Elsevier, vol. 60(C), pages 98-106.
    18. David W. Hughes, 2022. "A jackknife bias correction for nonlinear network data models with fixed effects," Papers 2203.15603, arXiv.org, revised Nov 2025.
    19. Ferro, Esteban & Otsuki, Tsunehiro & Wilson, John S., 2015. "The effect of product standards on agricultural exports," Food Policy, Elsevier, vol. 50(C), pages 68-79.
    20. repec:diw:diwwpp:dp1163 is not listed on IDEAS
    21. Witold Czubala & Ben Shepherd & John S. Wilson, 2009. "Help or Hindrance? The Impact of Harmonised Standards on African Exports †," Journal of African Economies, Centre for the Study of African Economies, vol. 18(5), pages 711-744, November.
    22. Nicolas Sauter, 2012. "Talking trade: language barriers in intra-Canadian commerce," Empirical Economics, Springer, vol. 42(1), pages 301-323, February.

    More about this item

    JEL classification:

    • L86 - Industrial Organization - - Industry Studies: Services - - - Information and Internet Services; Computer Software
    • F14 - International Economics - - Trade - - - Empirical Studies of Trade
    • F51 - International Economics - - International Relations, National Security, and International Political Economy - - - International Conflicts; Negotiations; Sanctions

    NEP fields

    This paper has been announced in the following NEP Reports:

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:cpb:discus:306. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: the person in charge (email available below). General contact details of provider: https://edirc.repec.org/data/cpbgvnl.html .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.