Characteristics and Behaviors of Anonymous Users of Dark Web Platforms Suspected of Child Sexual Offenses

Online paedophiles and the criminal justice experience: A qualitative perspective

BACKGROUND

Online forums provide a conduit for anonymous communication within deviant subcultures, such as online paedophiles. This helps to build virtual communities of support.

OBJECTIVE

This study explores the experience of paedophiles in the criminal justice system as reported by those who experienced it on such a forum. By analysing and understanding the experiences disclosed by these individuals, we may be able to design more targeted prevention strategies and treatment options.

PARTICIPANTS AND SETTING

Data are from one online forum discussion thread that includes 595 online forum posts by 212 unique usernames ranging over 11 years from 2012 to 2023. This forum claims to be an anonymous "therapeutic community" for paedophiles and does not allow the sharing of media (e.g., videos or images).

METHODS

This study uses an inductive approach to analyse the posts and discover the perspective and concerns of users who have experienced or are faced with prosecution and punishment.

RESULTS

Seven main themes emerged from the posts on this thread: support and praise, techniques of neutralisation, life in prison, anxiety and mental health, relationships, therapy, and difficulties post-prison.

CONCLUSIONS

The forum provided an important source of support among a virtual community of people who shared similar sexual interest in children and feel rejected and demonised by mainstream society. The thread functioned like an "echo chamber" that reinforced a positive view of users' deviant interest. Individuals who had been prosecuted for their offending were returning to the forum, which may encourage reoffending. Parole boards and probation officers may need to consider limiting or restricting access to the Internet, particularly the Tor network, when setting release conditions. Implications for treatment focus on challenging the justifications and excuses used by paedophiles.

Why do users continue to contribute to darknet Child Sexual Abuse Material forums? Examining social exchange, social capital, and social learning explanations using digital forensic artifacts

BACKGROUND

The darknet hosts an increasing number of hidden services dedicated to the distribution of child sexual abuse material (CSAM). Given that by contributing CSAM to the forum members subject themselves to criminal prosecution, questions regarding the motivation for members contributing to darknet CSAM forums arise.

OBJECTIVE

Building on insights gained from research into clearnet communities, here we examine the extent to which social incentives generated by the online CSAM community may explain members' posting behavior on darknet CSAM forums.

PARTICIPANTS AND SETTING

We analyze digital forensic artifacts on the online behavior of members of a darknet CSAM forum that was shut down by law enforcement agencies in July 2015.

METHODS

We apply group-based trajectory modelling (GBTM), social network analysis, and mixed-effect survival models.

RESULTS

Applying GBTM three posting trajectories can be distinguished. Social network analyses finds the reply network to be more centralized than predicted by chance. Mixed-effect survival models show positive associations between the length of members' first post and the time since members' first registration on the forum and subsequent posting. Contrarily, the number of replies received appears to mitigate subsequent posting.

CONCLUSIONS

Findings show posting activity on the forum to be concentrated in a minority of forum members who show posting trajectories that are both frequent and persistent. Results further suggest persistence in posting is motivated by social identity and, to a lesser extent, differential association processes.

How online data informs forensic mental health evaluations of sexual behavior: An overview

The Internet plays a pervasive role in modern life including the expression of human sexuality and sexual offending. A range of online sexual activities may be of interest in forensic mental health evaluations (FMHE), including those which are clearly illegal or those which are legal but functionally problematic. Online sexual offenses will clearly prompt forensic evaluators to consider the role of the Internet in these offending behaviors. The Internet may also be relevant in forensic evaluations of contact sexual offending including informing on history of mixed or cross-over offending, and Internet-facilitated contact offenses. A review of Internet-data may span several online domains, many of which provide the user with substantial anonymity and would likely not be available to the evaluator unless provided through the process of discovery. Early guidelines for the review of Internet-data in FMHEs have been proposed and support the Internet as a useful source of collateral data in the conduct of forensic evaluations of sexual behavior.

Discovering child sexual abuse material creators' behaviors and preferences on the dark web

BACKGROUND

Producing, distributing or discussing child sexual abuse materials (CSAM) is often committed through the dark web to stay hidden from search engines and to evade detection by law enforcement agencies. Additionally, on the dark web, the CSAM creators employ various techniques to avoid detection and conceal their activities. The large volume of CSAM on the dark web presents a global social problem and poses a significant challenge for helplines, hotlines and law enforcement agencies.

OBJECTIVE

Identifying CSAM discussions on the dark web and uncovering associated metadata insights into characteristics, behaviors and motivation of CSAM creators.

PARTICIPANTS AND SETTING

We have conducted an analysis of more than 353,000 posts generated by 35,400 distinct users and written in 118 different languages across eight dark web forums in 2022. Out of these, approximately 221,000 posts were written in English and contributed by around 29,500 unique users.

METHOD

We propose a CSAM detection intelligence system. The system uses a manually labeled dataset to train, evaluate and select an efficient CSAM classification model. Once we identify CSAM creators and victims through CSAM posts on the dark web, we proceed to analyse, visualize and uncover information concerning the behaviors of CSAM creators and victims.

RESULT

The CSAM classifier, based on Support Vector Machine model, exhibited good performance, achieving the highest precision of 92.3 % and accuracy of 87.6 %. While, the Naive Bayes combination is the best in term of recall, achieving 89 %. Across the eight forums in 2022, our Support Vector Machine model detected around 63,000 English CSAM posts and identified near 10,500 English CSAM creators. The analysis of metadata of CSAM posts revealed meaningful information about CSAM creators, their victims and social media platforms they used. This included: (1) The topics of interest and the preferred social media platforms for the 20 most active CSAM creators (For example, two top creators were interested in topics like video, webcam and general content in forums, and they frequently used platforms like Omegle and Skype); (2) Information about the ages and nationalities of the victims typically mentioned by CSAM creators, such as victims aged 12 and 13 with nationalities including British and Russian; (3) social media platforms preferred by CSAM creators for sharing or uploading CSAM, include Omegle, YouTube, Skype, Instagram and Telegram.

CONCLUSION

Our CSAM detection system exhibits high performance in precision, recall, and accuracy in real-time when classifying CSAM and non-CSAM posts. Additionally, it can extract and visualize valuable and unique insights about CSAM creators and victims by employing advanced statistical methods. These insights prove beneficial to our partners, i.e. national hotlines and child agencies.

Trust and Relationship Development Among Users in Dark Web Child Sexual Exploitation and Abuse Networks: A Literature Review From a Psychological and Criminological Perspective

The increased potential and speed of the Internet has changed the nature of sexual crimes against children. It enables individuals with a sexual interest in children to meet, interact, and engage in illegal activities. The literature review presented here aims to provide an overview of the current knowledge and understanding of trust and relationship development among users of online networks that are dedicated to the sexual exploitation and abuse of children. A systematic search using six databases was conducted to identify relevant literature from a psychological and a criminological perspective. Twenty-one studies met the inclusion criteria that centered around the key aspects of the literature review's research question, namely, (i) child sexual exploitation and abuse, (ii) Dark Web platforms, (iii) online forums and networks, and (iv) trust and relationship development. Our findings reveal that the engagement in interpersonal communication and interactions with like-minded others serves various functions, including validation, normalization, and support, as well as access to expert advice, information, and material. Dark Web networks are high-stake and risky environments, where users have to manage a continuous flow of threats, with information about others and their trustworthiness being limited. The establishment and maintenance of trust is of social and technical relevance, and users have to navigate a number of demands and commitments. Findings are discussed in relation to theoretical and practical implications, as well as directions for future research.