CHAPTER TWO: THE GLOBAL PICTURE exhaustive but covers the main sources of information that have some degree of cross-national comparability. Other sources include individual studies on selected phenomena, such as URL crawling techniques, or botnet takeover.8 Annex Two to this Study examines the strengths and challenges associated with each source in turn. It finds that, at present, while police-recorded cybercrime statistics are valuable for national-level crime prevention and policy making, they are not generally suitable for cross-national comparisons in the area of cybercrime. In contrast, survey-based information and technology-based cybersecurity information is beginning to provide some insights into the nature and extent of the phenomenon. These information sources are used below to address the questions of ‘what’ and ‘how much’ cybercrime. The question of ‘who’ is examined in the following section of this Chapter on cybercrime perpetrators. 2.2 The global cybercrime picture Key results:  Cybercrime acts show a broad distribution across financial-driven acts, computercontent related acts, as well as acts against the confidentiality, integrity and accessibility of computer systems  Perceptions of relative risk and threat vary between Governments and businesses  Individual cybercrime victimization is significantly higher than for ‘conventional’ crime forms. Victimization rates for online credit card fraud, identify theft, responding to a phishing attempt, and experiencing unauthorized access to an email account, vary between 1 and 17 per cent of the online population  Individual cybercrime victimization rates are higher in countries with lower levels of development, highlighting a need to strengthen prevention efforts in these countries  Private sector enterprises in Europe report victimization rates of between 2 and 16 per cent for acts such as data breach due to intrusion or phishing  Criminal tools of choice for these crimes, such as botnets, have global reach. More than one million unique IP addresses globally functioned as command and control servers for botnets in 2011  Internet content targeted for removal by governments includes child pornography and hate speech, but also defamation and government criticism, raising human rights law concerns in some cases  Some estimates place the total global proportion of internet traffic estimated to infringe copyright at almost 24 per cent This section paints a picture of the global nature and extent of cybercrime on the basis of data provided during information gathering for the Study from countries, private sector and academic organizations, as well as a review of over 500 open-source publications.9 8 9 See for example, Kanich, C. et al., 2011. No Plan Survives Contact: Experience with Cybercrime Measurement. Available at: http://static.usenix.org/events/cset11/tech/final_files/Kanich.pdf ; see also Kemmerer, R.A., 2011. How to Steal a Botnet and What Can Happen When You Do. Available at: http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6080765 Sources on file with the Secretariat. 25