SKRAM model, is a model created in 1998 by Donn Parker and presented in his book
Fighting Computer Crime: a New Framework for Protecting Information and it has been imposed
as a very valuable tool to start the investigation into the possible accused
in the execution of a cyber attack.
Donn Parker, Creator of the SKRAM Model
The acronym of the SKRAM model comes from the words Skill (ability), Knowledge
conocimiento
which are essential for Parker to generate a profile of a cybercriminal.
SKRAM stands for:
Skills
(authority) and Motive (Motive).
All of these characteristics are essential for Parker to generate a profile of a
computer criminal. We proceed to detail them:
Skills: The skills in SKRAM refer to the aptitude of a suspect with the
computers and technology.
To determine the level of competence of a suspect and their skills, an investigator
You can start with the work experience examination of that suspect.
They are usually skilled in the use of computers to commit cyber crimes.
They have technical training in network creation, hardware knowledge,
software packages, operating systems, security systems, software development,
databases and system administration are key areas that must be examined by a
researcher.
Knowledge: At first glance, knowledge resembles skills quite a bit.
difference in skills, knowledge is a more general measure of skills
specific skills acquired by a suspect that are essential for carrying out the attack
the computer scientist in question.
Knowledge includes a suspect's ability to plan and predict actions of
its victims, its objective is the computational infrastructure and a firm knowledge of it.
what they are looking for.
Researchers must try to identify who has the body of knowledge.
specific to carry out the cybercrime being investigated.
Resources: A qualified and knowledgeable suspect is unable to commit a crime if they do not possess
the necessary resources. The resources include both the physical components as well as the
contacts that the suspect has at their disposal.
When examining a suspect's resources, investigators must not overlook the
business associates of a suspect, their membership in clubs and the network of friends if possible
to be identified.
Authority: Authority is a measure of the suspect's access and helps them exercise control.
about the necessary information to commit a crime. A suspect may be the
vital information manager, such as password files and therefore have
easy access to commit a crime using that information.
Researchers must determine the relationship of a suspect with the necessary data.
to commit a computer crime.
Reason: All the technical knowledge in the world may not be enough to
determine that a suspect has committed a cybercrime.