Online Library

The emergence and growth of incel subculture online has triggered a considerable body of research to date, most of which analyzing its worldview or mapping its position and connections within the broader manosphere. While this research has considerably enhanced our understanding of the incel phenomenon, it tends to offer a somewhat static, one-dimensional portrayal of what is—like all online subcultures and communities—a highly dynamic and multi-layered environment. Consequently, we lack sufficiently nuanced answers to what is arguably a critical question for law enforcement and academics alike: is this a violent extremist ideology? Using a uniquely extensive corpus covering a range of online spaces constitutive of the incelosphere spanning several years, we analyze the evolution of incel language across both time and platforms. Specifically, we test whether this language has grown more extreme over time as online spaces shutdown and others emerged. Our findings demonstrate that, while levels of violent extremist language do vary across the incelosphere, they have steadily increased in the main online spaces over the past 6 years. Further, we demonstrate that, while activity on these online spaces is responsive to offline events, the impact of these on violent extremist ideation is not uniform.

This report concerns itself with terrorist technical innovation, particularly with regards to terrorists’ incorporation of emerging technologies into their practices. More specifically, it investigates, through the elaboration of a theoretical learning framework, how terrorist groups can adopt the practices of ideological enemies operating in different security, ideological and political environments. It does so through a study of three cases of emerging technology use by Islamic State (IS) and racially and ethnically motivated violent extremists (REMVE), which shed light on why ideologically diverse groups might adopt practices from each other.

VOX-Pol Blog post.

VOX-Pol Blog post.

Social media and tech companies face the challenge of identifying and removing terrorist and extremist content from their platforms. This paper presents the findings of a series of interviews with Global Internet Forum to Counter Terrorism (GIFCT) partner companies and law enforcement Internet Referral Units (IRUs). It offers a unique view on current practices and challenges regarding content removal, focusing particularly on human-based and automated approaches and the integration of the two.

The rise of technology has brought with it many benefits but also the potential for great dangers. In particular, Information Communication Technology (ICT) is involved in many facets of life-influencing systems, which range from power plants to airports. Terrorists are now realising the great possibilities of interfering with critical infrastructure. Remote access, reduced costs, automation, replication, speed, direct effect, varied targets and anonymity are all benefits that make attacking computers and networks in cyberspace an attractive solution. ICT could thus serve as a powerful instrument to advance political and ideological viewpoints. The ICT landscape now faces an emerging threat in the form of cyberterrorists. However, it is important not to incorrectly perceive ordinary cyber attacks as cyberterrorism. Cyberterrorism is different from cybercrime in that is has differing motives, attack goals, techniques and intended effects. The motivation for cyberterrorism largely stems from political and ideological views (religious, social activism, retributional). Cyber attacks are mainly driven by financial theft, fraud or espionage, whereas cyberterrorism aims to create publicity for a cause and leave a high impact. In this study, a Cyberterrorism Life Cycle (CLC) Model is developed in order to demonstrate the various factors that lead to the establishment and growth of cyberterrorism. The model depicts the various strategic and technical issues that are relevant to the field. Overall, this model aims to structure the dynamic interaction of the behavioural and technological factors that influence the development of cyberterrorism. Throughout the research, various factors that are influential to cyberterrorism are investigated. The research follows a systematic approach of revealing various underlying issues and thereafter compiling the holistic CLC model to depict these critical issues. Part 1 introduces cyberterrorism and provides the background to the field by discussing incidents and example groups. Initially, the concept of cyberterrorism is explored and the proposed definition tested. Part 2 looks at investigating cyberterrorism more deeply. A conceptual framework is presented that introduces the most pertinent factors in the field of cyberterrorism. Next, the traditional and innovative use of the Internet to carry out and support terrorism is explored. Then, the study addresses the determination of additional social factors using Partial Least Squares Path Modelling. In Part 3, the field of cyberterrorism is more intensely studied. Cyberterrorism is mapped to the Observe-Orient- Decide-Act (OODA) loop, which will form the basis of the CLC model. Thereafter, the most influential concepts essential to the field of cyberterrorism are applied in order to classify attacks as cyberterrorism using ontologies. Furthermore, in Part 3, countermeasures are discussed to look at ways to combat cyberterrorism. Part 4 forms the crux of the research. The CLC model is presented as a structured representation of the various influential factors relevant to cyberterrorism. Thereafter, the CLC model is simulated to show the field more dynamically. Overall, the CLC model presented in this study aims to show the interaction of the various strategic, behavioural and technical issues. The CLC model can help elucidate the reasons for attraction into extremist groups and how attacks are carried out.