SOC*3720: Technology & Crime - Lectures 1 to 3

Foundations of Technology, Affordances, and Cyber-Criminology

• Defining Technology Through the Socio-Technical Perspective:

  • Technology is not just a lifeless physical object, tool, or passive machine that exists separately from people.

  • It operates in a two-way reciprocal loop (mutual shaping) with human society:

  • Society shapes technology through research funding, invention, legal regulation, cultural adoption, and daily use.

  • In return, technology shapes society by altering human interactions, social values, personal habits, and community structures.

• Concept and Mechanics of Affordances:

  • An affordance refers to the specific design elements, built-in features, and properties of an object or digital platform that suggest, invite, or steer how a person interacts with it.

  • Behavioral possibilities: Actions that an environment or interface makes possible or easy to do (e.g., a chair invites sitting; an instant messaging application affords real-time communication).

  • Behavioral constraints: Built-in barriers, boundaries, or rules that block or limit certain actions (e.g., a locked door restricts entry; a character limit prevents long essays).

• Digital Affordances and the Neutrality Debate:

  • Online platforms create distinct environments that can trigger both prosocial (helpful, positive) and antisocial (harmful, criminal) behaviors.

  • Example: Anonymity on a forum lets a shy person open up about personal mental health challenges without fear, but the exact same anonymity enables an online harasser or cyber-troll to post abuse without facing immediate real-world consequences.

  • Because the identical digital feature can lead to either community connection or criminal harm, scholars actively debate the "neutrality" of technology (whether tech is an unbiased tool or inherently pushes users toward specific behaviors).

• Definition and Scope of Cyber-Criminology:

  • Cyber-criminology is an interdisciplinary field dedicated to examining how and why people commit online offenses, how victims are targeted, and how society and the justice system respond.

  • It integrates the "human factor" with technical systems by uniting three core disciplines:

  • Computer and Information Sciences: Details network architecture, data structures, software code, and technical vulnerabilities.

  • Sociology and Criminology: Examines group dynamics, subcultures, laws, social harms, and community reactions.

  • Psychology: Explains individual decision-making, emotional triggers, personal traits, and online cognitive processes.

Conceptualizing, Classifying, and Chronologizing Cybercrime

• The Four Roles of Technology in Crime:

  • Tool or Mechanism: Technology acts as the instrument or weapon to carry out an offense (e.g., using phishing emails to steal banking passwords).

  • Direct Target: Technology itself is the victim being attacked, damaged, or sabotaged (e.g., deploying ransomware to disable a hospital network).

  • Environment or Space: The digital platform serves as the actual venue or virtual location where the offense occurs (e.g., a multiplayer video game lobby where targeted harassment takes place).

  • Communication Medium: Technology provides the social infrastructure for deviant groups to meet, share tips, and organize (e.g., private darknet forums where digital pirates share files and exploitation scripts).

• Cybercrime versus Cyber-Deviance:

  • Cybercrime: Computer-mediated activities that breach formal, codified penal laws and statutes.

  • Cyber-Deviance: Actions that break informal social expectations, cultural norms, and online etiquette without necessarily breaking criminal laws (e.g., forum trolling, social snubbing, or spamming).

  • Jurisdictional Fragmentation: The global internet crosses international borders, meaning an action that is illegal in one nation (such as unauthorized media downloads or specific hate speech) may be legal, unregulated, or unenforced in another.

  • Online Offending: An overarching umbrella term used by scholars to cover both illegal crimes and socially unacceptable online actions regardless of cross-border legal technicalities.

• Typology I: Cyber-Enabled versus Cyber-Dependent Offenses:

  • Cyber-Enabled Crimes ("Computer-Assisted"):

  • Traditional, offline crimes that do not require computers to exist, but use digital networks to expand their reach, speed, scale, or geographic scope.

  • Core Concept: Old offenses modernized through online networks.

  • Examples: Advance-fee fraud, cyberstalking, interpersonal harassment, identity theft, and illicit online drug sales.

  • Cyber-Dependent Crimes ("Computer-Focused"):

  • Novel offenses that can only exist and be executed through Information and Communication Technologies ($\text{ICTs}$).

  • Core Concept: New crimes directly targeting computer hardware, software, or digital networks.

  • Examples: Writing and spreading malware, unauthorized network penetration (hacking), Denial-of-Service ($\text{DoS}$ and $\text{DDoS}$) attacks, bot warfare, and website defacements.

• Typology II: Wall's ($2001$) Target-Based Typology:

  • Categorizes cybercrimes based on the specific type of victim or target harmed:

  1. Cyber-violence: Interpersonal attacks causing emotional, psychological, or physical harm to individuals (e.g., cyberstalking, online hate speech, targeted threats).

  2. Cyber-trespass: Unauthorized crossing of digital boundaries into systems or networks without permission (e.g., bypassing firewalls, administrative hacking without stealing data).

  3. Cyber-deceptions and thefts: Stealing money, property, data, or ideas using digital misdirection and fraud (e.g., phishing scams, credit card theft, digital piracy).

  4. Cyber-pornography: Violating statutory laws and public order surrounding restricted explicit materials (e.g., non-consensual sharing of intimate images, illicit sexual content).

• Historical Evolution of Cybercrime:

  • Early Years and Foundations ($1970\text{--}1989$):

  • $1968$: Establishment of ARPANET, creating the physical foundation for the internet.

  • $1972$: First network email system created.

  • $1973$: Invention of the $\text{TCP/IP}$ protocol to allow distinct networks to communicate.

  • $1983$: Invention of the Domain Name System ($\text{DNS}$) protocol.

  • $1988$: The Morris Worm released, demonstrating the first widespread automated internet disruption.

  • $1989$: Enactment of the Computer Fraud and Abuse Act ($\text{CFAA}$) in the United States.

  • User-Friendly Proliferation ($1990\text{--}1999$):

  • $1995$: Release of Windows $95$ and widespread public adoption of the Netscape Navigator web browser.

  • $1997$: Proliferation of Bulletin Board Systems ($\text{BBS}$) and synchronous online chat platforms.

  • $1998$: Release of the "Back Orifice" remote administration Trojan, exposing personal computer vulnerabilities.

  • Global Networking and Diversification ($2000\text{--}2009$):

  • $2001$: Rise of Peer-to-Peer ($\text{P2P}$) networks (Napster, Kazaa); drafting of the international Budapest Convention on Cybercrime.

  • $2004$: Launch of The Facebook.

  • $2005$: Samy worm propagates across MySpace, proving automated social media exploits.

  • $2007$: Release of smartphones (iPhone), shifting internet use from fixed desks to ubiquitous daily routines.

  • $2008$: Federal law enforcement takedown of the cybercrime marketplace DarkMarket.

  • Explosive Industrialization ($2010\text{--}2019$):

  • $2010$: Coordinated WikiLeaks publication and Anonymous distributed denial-of-service ($\text{DDoS}$) campaigns.

  • $2012$: Emergence of commercial darknet illicit marketplaces (e.g., Silk Road); state-sponsored Shamoon cyber attack on Saudi Aramco.

  • $2017$: Deployment of NotPetya malware, shutting down multinational shipping operations (Maersk) and port infrastructures.

  • Infrastructure Warfare and AI ($2020\text{--}\text{Present}$):

  • $2021$: Ransomware attack on the Colonial Pipeline disrupts national fuel supplies during the $\text{COVID-19}$ pandemic.

  • $2022$: Cyber warfare operations deployed directly alongside military conflict between Russia and Ukraine.

  • $2023$: Proliferation of generative Artificial Intelligence ($\text{AI}$) and large language models used to automate social engineering and polymorphic code generation.

• Structural Challenges for Criminal Justice Systems:

  • Transnational Jurisdiction: Digital crimes happen globally and instantly, while police jurisdictions remain locked within regional and national borders, creating regulatory safe havens where extradition treaties do not exist.

  • Conceptual Dualism: The legal tendency to treat online offenses as mere digital replicas of offline crimes, leading courts to force-fit outdated laws onto modern technology while under-funding specialized cyber-policing units.

Individual and Structural Predictors of Online Offending

• Individual-Level Predictors:

  • Demographic Characteristics:

  • Gender: Males commit significantly more cybercrime across almost all categories; strong endorsement of hyper-masculine traits strongly correlates with online harassment.

  • Age: Cyber-offenders are predominantly young, with peak offending occurring between the ages of $12$ and $35\text{ years old}$.

  • Age-Crime Curve: The cyber age-crime curve peaks sharply in an individual's early $20\text{s}$.

  • Generational Dynamics: Scholars continue testing whether high offending is driven by biological maturation or by belonging to a generational cohort of "digital natives" who grew up immersed in technology.

  • Analytical Controls: Race, marital status, household income, and formal education generally serve as statistical control variables rather than direct causal drivers.

  • Internet Use Patterns:

  • Digital Literacy: High technical proficiency enables complex, high-skill crimes (e.g., vulnerability exploitation, reverse engineering), whereas low-barrier offenses (e.g., media piracy) require basic digital skills.

  • Subjective Competence: Believing oneself to be technically superior lowers the perceived risk of detection, encouraging riskier online offenses.

  • Time Spent Online: Spending extended hours on the internet increases exposure to illicit digital spaces, raising the statistical odds of both offending and becoming a victim.

  • Psychological and Emotional States:

  • Anger and Frustration: Acute trait and state anger strongly predict interpersonal online aggression, cyberbullying, and trolling.

  • "Rage Fuel": Reading contentious or infuriating web content creates emotional arousal that individuals redirect toward unrelated third-party users.

  • Mental Health Markers: Loneliness, depressive distress, and low self-esteem frequently correlate with time spent in deviant online groups.

• Structural Predictors: Platform Architectures and Digital Affordances:

  • Anonymity (Perceived Hidden Identity):

  • Feeling unidentifiable removes fear of public embarrassment, reputational damage, and legal punishment.

  • Serves as a major catalyst for hacking, stalking, and aggressive trolling.

  • Theoretical Blindspot: Fails to explain widespread harassment occurring on non-anonymous platforms (e.g., Facebook, LinkedIn) where real names and photos are displayed.

  • Asynchronicity (Time Lag in Communication):

  • Communication is rarely instantaneous; messages are sent, stored, and read at different times.

  • Eliminates immediate visual feedback or emotional reactions from the victim, creating emotional detachment and moral disengagement in the offender.

  • Digital traces persist permanently, allowing delayed convergence between victims and offenders.

  • Fewer Non-Verbal Cues (Lack of Biological Signals):

  • Text-based interfaces remove facial expressions, vocal inflections, eye contact, and body language.

  • Strips away natural human empathy prompts, substantially increasing online hostility and "flaming."

  • Less Salient Social Norms (Unclear Moral Boundaries):

  • The internet lacks a single, universally shared behavioral code, making virtual environments feel unpoliced and lawless.

  • Platform rules are frequently vague, while niche subcultural forums actively normalize "tolerable deviance" (e.g., treating software piracy as harmless sharing).

  • Virtuality (Disembodied and Non-Physical Space):

  • Cyberspace is borderless and anti-spatial, removing physical distance as a protective barrier.

  • Allows a single offender to target thousands of victims globally at minimal cost, bypass local police borders, and perform offenses before a massive "invisible audience."

Criminological Theories and Cybercrime Applications

• Rational Choice Theory:

  • Argues an individual commits a crime after weighing the anticipated benefits (financial gain, street credibility, personal amusement) against the perceived costs (punishment, effort, getting caught).

  • Digital environments skew this calculation: because jurisdictional borders and anonymity make the certainty of legal punishment feel exceptionally low, offenders perceive cybercrime as low-risk and high-reward.

• Social Learning Theory:

  • Posits that criminal behaviors, specialized technical methods, and moral justifications are acquired by interacting with deviant peer groups (e.g., on underground forums, Discord channels, and darknet boards).

  • Groups offer differential reinforcement (status symbols, praise, shared tools) that reward illegal activities.

  • Techniques of Neutralization: Mental justifications used to cancel out personal guilt:

  • Denial of Responsibility: "The code had a bug; anyone would have taken advantage of it."

  • Denial of Injury: "Large multinational corporations have billions; they won't even notice this small loss."

  • Denial of the Victim: "They failed to patch their server security, so they deserved to be hacked."

• Self-Control Theory (General Theory of Crime):

  • Gottfredson and Hirschi argue that individuals with low self-control (impulsive, risk-seeking, short-sighted, self-centered) will commit crimes whenever an opportunity appears.

  • Low self-control reliably predicts impulsive online offenses (such as flaming, trolling, or impulsive fraud), though digital opportunity structures differ radically from physical environments.

• Routine Activity Theory ($\text{RAT}$) and Situational Crime Prevention:

  • Cohen and Felson state that predatory crime requires three elements to converge simultaneously in time and space:

  1. A Motivated Offender: An individual with the intent and capacity to commit a crime.

  2. A Suitable Target: A valuable, accessible, and vulnerable victim or asset.

  3. Absence of a Capable Guardian: Lack of human or technical protections preventing the act.

  • Digital Target Suitability: Unpatched server software, weak passwords, unencrypted financial records, and publicly shared personal data.

  • Digital Capable Guardianship: Multi-factor authentication, firewalls, up-to-date antivirus software, network monitoring staff, and active platform moderators.

  • Situational Crime Prevention ("Target Hardening"):

  • Making crime harder, riskier, and less rewarding directly at the point of action.

  • Platform Architecture Nudges and Interventions: Implementing behavioral speed bumps into digital spaces to prevent rash offenses:

    • Reddit (r/PowerPoint, r/Politics): In-interface comment reminders stating "Please be civil in discussions" and displaying rules before a user submits a post.

    • Instagram ($2019$): Automated pop-up warnings asking "Are you sure you want to post this?" when detecting aggressive comments.

    • Twitter ($2020$): Prompts asking "Want to review this before Tweeting?" when detecting potentially harmful or offensive language.

  • Pluralistic Responsibility Question: Sparks the debate over who carries the primary duty for digital guardianship—individual users, tech platforms, or law enforcement agencies.

• The Theoretical Debate: Continuists versus Transformationists:

  • The Metaphor Breakdown:

  • Wine: Represents human behaviors, underlying motivations, or criminal actions.

  • Bottles: Represents the environments, structural settings, or technological mediums.

  • Continuists ("Old Wine in New Bottles"):

  • Championed by Grabosky ($2001$).

  • Premise: Fundamental human motivations (greed, anger, revenge, lust) never change. Technology is merely a new venue or "bottle" for age-old behaviors.

  • Primarily focuses on cyber-enabled crime and insists traditional criminological theories remain fully sufficient to explain digital crime.

  • Transformationists ("New Wine in New Bottles"):

  • Championed by Leukfeldt and Yar ($2016$).

  • Premise: Cyberspace creates a genuinely unique social realm characterized by dematerialization (no physical goods), de-territorialization (no borders), and disembodiment (no physical bodies).

  • Produces brand-new categories of crime (cyber-dependent) that require entirely new theoretical models and empirical tools.

• Critiques of Traditional Theories in Cyberspace:

  • Yar ($2005$) points out that Routine Activity Theory relies on "ecological assumptions" of physical space, direct proximity, and clock time.

  • In cyberspace, an offender in one country can compromise thousands of computers on the other side of the planet simultaneously while sleeping, rendering traditional concepts of "shared physical space and time" meaningless.

• Cyber-Integrated Theorizing:

  • Advanced by Bossler ($2019$) as a middle ground.

  • Keeps classic criminological explanations, but inserts digital affordances as moderating variables (factors that strengthen or weaken an existing relationship).

  • Example: Testing whether the link between low self-control and online harassment is amplified when the platform provides high anonymity.

• Adapted Theorizing (Modifying Existing Theories):

  • Digital Drift (Goldsmith & Brewer, $2015$): Adapts Matza's drift theory. Digital interfaces lower barriers to entry, letting young users drift casually between normal internet activities and minor illicit acts without adopting an official "criminal" identity.

  • Digital Seduction (Goldsmith & Wall, $2019$): Adapts Katz's seductions of crime. The speed, asymmetry, and technical feedback of hacking provide an intoxicating sensory rush that overrides internal self-regulation.

  • Cyborg Crime (Van der Wagen, $2018$): Utilizes Actor-Network Theory ($\text{ANT}$) to treat autonomous scripts, bots, and malware programs as non-human "agents" acting as co-offenders alongside humans.

• Context-Congruent New Theorizing (Brand-New Frameworks):

  • Space-Transition Theory (Jaishankar, $2008$): Explains why people who follow the law offline behave deviously online. The combination of anonymity, perceived lack of legal consequences, disembodiment, and ambiguous moral rules online creates a complete psychological break from offline behaviors.

  • Cyber-Psychopathy Theory (Nevin, $2015, 2021$; Todd, $2014$): Argues that the cold, cue-free digital environment mimics the daily cognitive reality of a clinical psychopath. Prolonged immersion causes vulnerable people to emotionally dissociate, eroding their normal empathy and sparking psychopathic-like behaviors online.

Official Sources of Cybercrime Data: Police Statistics and Severity Indices

• Uniform Crime Reporting ($\text{UCR}$) Programs:

  • Official crime numbers collected, standardized, and released by national government agencies based on police incident reports.

  • United States: Run by the $\text{FBI}$ since $1929$ to establish unified national crime classifications.

  • Canada: Administered since $1962$ by the National Justice Statistics Initiative via Statistics Canada, collecting annual municipal, provincial, and federal police reports.

  • Tracks total incident counts and standardized rates per $100,000$ population to allow comparisons across geographic jurisdictions and time.

• Canadian $\text{UCR 2.4}$ Update ($2021$):

  • Introduced a streamlined electronic reporting standard that formally defines a cyber-related violation as: "a criminal violation in which a computer or the Internet was the target of the crime, or the instrument used to commit the crime."

  • Captures specific offenses: unauthorized distribution of intimate images, identity theft, online extortion, and indecent/harassing communications.

  • Systemic Critique: The definition is overly broad. Police departments often classify standard offline conflicts containing a single incidental text message as full-scale cybercrimes, artificially inflating rates.

• Longitudinal Trends in Canadian Cybercrime ($2015\text{--}2023$):

  • Official police reports in Canada show continuous, steep upward growth:

  • $2015$: Recorded $17,887$ incidents (rate of $55.6$ per $100,000$).

  • $2016$: Recorded $23,996$ incidents (rate of $74.1$ per $100,000$).

  • $2017$: Recorded $27,829$ incidents (rate of $81.7$ per $100,000$).

  • $2018$: Recorded $33,893$ incidents (rate of $92.0$ per $100,000$).

  • $2019$: Recorded $48,318$ incidents (rate of $129.2$ per $100,000$).

  • $2020$: Recorded $65,141$ incidents (rate of $171.9$ per $100,000$).

  • $2021$: Recorded $71,727$ incidents (rate of $188.1$ per $100,000$).

  • $2022$: Recorded $80,246$ incidents (rate of $206.7$ per $100,000$).

  • $2023$: Recorded $93,068$ incidents (rate of $233.1$ per $100,000$).

• Breakdown of Cyber-Related Offenses in Canada ($2021\text{--}2023$ Incident Counts):

  • Fraud: Represents the largest volume category by far—$34,080$ incidents in $2021$; $39,486$ in $2022$; $43,680$ in $2023$.

  • Extortion: Rapidly increasing—$3,160$ in $2021$; $5,266$ in $2022$; $6,747$ in $2023$.

  • Indecent or Harassing Communications: $6,711$ in $2021$; $5,997$ in $2022$; $5,743$ in $2023$ (Note: A separate $2022$ metric recorded $26,697$ actual incidents with a rate of $69$ per $100,000$, showing a $5\text{-year}$ cumulative increase of $+51.11\%$ despite a $-4.65\%$ single-year dip).

  • Uttering Threats: $5,007$ in $2021$; $5,336$ in $2022$; $5,184$ in $2023$.

  • Criminal Harassment: $3,347$ in $2021$; $3,701$ in $2022$; $3,092$ in $2023$.

  • Luring a Child via a Computer: $1,846$ in $2021$; $1,977$ in $2022$; $1,758$ in $2023$.

  • Non-Consensual Distribution of Intimate Images: $870$ in $2021$; $946$ in $2022$; $1,168$ in $2023$.

  • Identity Theft: $864$ in $2021$; $802$ in $2022$; $799$ in $2023$ (Note: A separate $2022$ metric recorded $6,812$ actual incidents with a rate of $17$ per $100,000$, showing a $5\text{-year}$ cumulative rise of $+93.90\%$ despite a $-7.51\%$ single-year change).

  • Other Violent Violations: $357$ in $2021$; $323$ in $2022$; $374$ in $2023$.

  • Voyeurism: $137$ in $2021$; $142$ in $2022$; $184$ in $2023$.

  • Invitation to Sexual Touching: $157$ in $2021$; $168$ in $2022$; $154$ in $2023$.

  • Sexual Exploitation: $34$ in $2021$; $39$ in $2022$; $35$ in $2023$.

  • Homicide and Related Violations: $4$ in $2021$; $7$ in $2022$; $2$ in $2023$.

• Crime Severity Index ($\text{CSI}$):

  • Traditional crime rates count all offenses equally ($1$ bicycle theft equals $1$ murder in standard counts).

  • Canada's $\text{CSI}$ assigns a distinct mathematical weight to each offense based on actual court sentencing data (more harm to the community = longer sentences = higher weight).

  • Comparison: A murder has a weight of over $8,200$, while minor property theft carries a weight of $29.2$, meaning one homicide exerts roughly $280\text{ times}$ the impact of a minor theft on the index.

  • Cyber-Related Weights:

  • Luring a child via a computer = $368.7$.

  • Identity theft = $144.5$.

• Limitations of Official Police Statistics:

  • The Dark Figure of Crime:

  • The massive pool of committed cybercrimes that are never reported to the police and never appear in $\text{UCR}$ tables.

  • Cybercrimes are exceptionally prone to underreporting because they are highly hidden, victims frequently dismiss them as civil matters, harms are seen as abstract, and victims assume police lack the resources to track down perpetrators.

  • Rate Sensitivity:

  • Official rate shifts often reflect changes in public reporting, legislative updates, or new policing priorities rather than actual changes in underlying offender behavior.

  • "Definition-sensitive offenses" fluctuate whenever a new bill passes (such as Canada's Bill C-13 expanding definitions of intimate image distribution).

  • Internet Crime Complaint Center ($\text{IC3}$):

  • Established by the $\text{FBI}$ in $2000$ to gather direct, voluntary complaints from cybercrime victims, focusing on reported monetary losses.

  • Major Underreporting Bias: In $2018$, the $\text{IC3}$ logged $351,937$ complaints, but estimated its system only catches $10\text{--}12\%$ of actual crimes (suggesting an estimated $3.5\text{ million}$ events).

  • Independent nationally representative Gallup polling found $1\text{ in }4$ American households experienced cybercrime, projecting up to $31.5\text{ million}$ total offenses.

Victimization Surveys and Business Impact Assessments

• National Crime Victimization Survey ($\text{NCVS}$):

  • Administered annually by the U.S. Bureau of Justice Statistics since $1972$.

  • Surveys a nationally representative sample of $N = 150,000$ individuals aged $16\text{ years and older}$.

  • Directly interviews victims about their experiences, bypassing police reporting to capture the dark figure of crime.

  • Uses specialized supplements for cyber phenomena: the Supplemental Victimization Survey ($\text{NCVS-SVS}$) for cyberstalking, and the Identity Theft Supplement ($\text{NCVS-ITS}$).

• General Social Survey – Canadians' Safety ($\text{GSS:CS}$):

  • Administered by Statistics Canada every five years (established in $1988$, e.g., Cycle $28$) across a representative household sample of $N = 25,000$ individuals aged $15\text{ years and older}$.

  • Measures crime victimizations, reporting habits, fear of crime, and neighborhood safety perceptions.

  • Included a specialized $2019$ public safety supplement covering cyberstalking, online harassment, and cyberbullying.

• Empirical Study: Popham ($2021$):

  • Analyzed the $2014\text{ GSS:CS}$ data using an analysis of variance ($\text{ANOVA}$) model.

  • Found that individuals experiencing poly-victimization (experiencing both traditional offline crime and online cyber-victimization) reported significantly lower perceived community safety compared to individuals experiencing only local offline victimization or only online victimization.

• Canadian Survey of Cyber Security and Cybercrime ($\text{CSCSC}$):

  • A biennial federal survey ($2017, 2019, 2021, 2023$) assessing how cyber attacks impact private Canadian enterprises.

  • The $2023$ survey captured $12,462$ businesses across various economic sectors.

  • Key $2023$ Findings:

  • $16\%$ of Canadian businesses reported a confirmed cybersecurity incident.

  • Over $\$10\text{ billion}$ was spent by Canadian businesses on preventative security infrastructure, recovery, and staff training.

• Methodological Limitations of Victimization Surveys:

  • Memory Decay: Victims forget details or dates over time.

  • Telescoping: Victims accidentally pull events that happened outside the survey window into the reporting timeframe.

  • Exclusion of Vulnerable Populations: Fixed-household survey sampling systematically excludes unhoused individuals and institutionalized populations who remain vulnerable to cyber-victimization.

  • Instrument Changes: Redesigning survey questions breaks long-term data continuity, preventing smooth comparisons over time.

Academic Research Methodologies in Cybercrime Studies

• Quantitative Survey Research:

  • Uses closed-ended questionnaires to gather numerical self-reports of offending or victimization, making it ideal for tracking high-volume, minor, or "victimless" offenses (like digital media piracy).

  • Academic studies rely heavily on targeted, non-probability community samples rather than broad population-wide samples.

  • Protects participants from legal self-incrimination by providing encrypted collection and absolute confidentiality, reducing social desirability bias (lying to look good).

• Qualitative In-Depth Interviews:

  • Structured as a "conversation with a purpose," allowing researchers to understand personal motivations, rationalizations, and subcultural career paths.

  • Interviewees are found on online forums, through snowball sampling (referrals from other participants), or by reaching out to hackers via handles left at the "scene of the crime."

  • Requires building "insider status" or winning over trusted community "gatekeepers."

  • Textual Listening: Reading text-based, asynchronous chats carefully to accurately interpret internet slang, abbreviations, memes, and emojis.

  • Trace Interviewing: A newer technique where the researcher shows the interviewee their actual past digital logs, forum posts, or chat transcripts to jog their memory and have them reconstruct their decision-making process in that exact moment.

• Digital Ethnography:

  • The researcher directly immerses themselves in online settings (public discussion boards, encrypted chat rooms, darknet marketplaces).

  • Involves analyzing chat logs, forum posts, screenshots, and observing interactions in natural environments without alerting users (covert observation), preventing the Hawthorne effect (people changing behavior because they know they are being watched).

  • Method Breakdown: Data collection occurs via interviews and observational work; active participant-observation is far less common due to legal liabilities, ethical rules, and the danger of assisting in crimes.

  • Operational Security ($\text{OPSEC}$): Researchers must use virtual private networks ($\text{VPNs}$) and isolated, separate "sandbox" computers to prevent malicious retaliation (such as doxxing or malware infections).

  • Requires maintaining emotional boundaries and practicing structured self-care when navigating toxic or distressing digital communities.

• Computational Methodologies and Digital Trace Data:

  • Involves gathering and analyzing "Big Data"—the digital footprints and logs users leave behind publicly online.

  • Web Scraping: Using automated scripts and Application Programming Interfaces ($\text{APIs}$) to pull large amounts of text, images, and user metrics from web pages.

  • Analytical Pipelines: Utilizing machine learning algorithms, Natural Language Processing ($\text{NLP}$), and sentiment analysis to identify patterns and themes in massive text datasets.

  • Methodological Hurdles: Algorithms often struggle to accurately detect nuanced human language, including sarcasm, irony, and evolving slang.

  • Ethical Hurdles: Digital research methods evolve much faster than institutional Research Ethics Boards ($\text{REBs}$) can update their guidelines, creating unresolved questions about obtaining informed consent, data minimization, and intellectual property.

• Creative and Experimental Research Approaches:

  • Honeypots:

  • Fake computer networks, decoy websites, or simulated vulnerable servers intentionally designed to lure in attackers and record their moves.

  • Records the intruder's $\text{IP}$ address, keystrokes, operating system, and attack scripts in a controlled sandbox without putting real data at risk.

  • Used experimentally (e.g., displaying different deterrent warning banners to see which ones successfully stop an intruder).

  • Ethical Hurdle: Requires formal institutional justification proving that deceptive entrapment is necessary and serves a vital public interest.

  • Capture-the-Flag ($\text{CTF}$) Exercises:

  • Controlled, ethical hacking competitions where security experts attack and defend simulated networks, allowing researchers to observe offensive strategies and defensive patching under real-time laboratory conditions.

  • Procurement of Illicit Datasets:

  • Acquiring databases of leaked administrative logs or defacement archives (such as the Zone-H Defacement Archive, which tracks self-reported hacked websites) to analyze target suitability and attacker habits using Routine Activity Theory.

Institutional Details and Course Information

• Wrongful Conviction Day $2026$ Event:

  • Date: October $6$, $2026$.

  • Time: $7:00\text{--}8:30\text{ p.m.}$

  • Location: Rozanski Hall, Room $104$ ($\text{ROZH 104}$, University of Guelph).

  • Guest Speaker: Guy Paul Morin (Canadian exoneree).

  • Event Link: uoguel.ph/cjpp-wcd.

• Course Information and Required Readings:

  • University of Guelph, Department of Sociology and Anthropology.

  • Course: SOC*3720: Technology & Crime (Fall $2026$, Section $01$).

  • Lecture 2 (Theorizing Cybercrime) Assigned Reading: Textbook – Chapter $2$.

  • Lecture 3 (Researching Cybercrime) Assigned Reading: Textbook – Chapter $3$.

  • Lecture 4 (Addressing Cybercrime) Assigned Reading: Textbook – Chapters $15$, $16$, and supplementary Chapter $7$.

  • Upcoming Topic: Lecture $4$