Researchers can identify underground users via linguistics

Around 80 percent who wrote at least 5000 words across their posts could identify certain anonymous underground forum users, researchers state.

“Function words are very specific to the writer. Even if you are writing a thesis, you’ll probably use the same function words in chat messages.  Even if your text is not clean, your writing style can give you away.”   researcher Sadia Afroz said at the 29C3 Chaos Communication Congress in Germany.

The analysis methods could also expose botnet owners, and malware authors and provide insight into the size and scope of underground markets, making the research appealing to law enforcement agencies.

“To achieve their results the researchers used techniques including stylometric analysis, the authorship attribution framework Jstylo, and latent Dirichlet allocation which can distinguish a conversation on stolen credit cards from one on exploit-writing, and similarly help identify interesting people,” reports SCMagazine.