Strengthening the Nexus between Criminology and Cybersecurity

Abstract

Cybercrime is broadly defined in criminological literature as an umbrella concept that includes both conventional offences committed through digital means and offences that can only exist within networked environments. The former category, often termed ‘cyber-enabled crimes’, involves traditional crimes such as fraud and theft that are facilitated by technology, while the latter, ‘cyber-dependent crimes’, refers to acts like hacking and malware distribution that are intrinsic to digital systems. Similarly, cybersecurity operates as an expansive and interdisciplinary domain encompassing both academic research and applied practice. Within computer science and information security, it is generally understood as the set of policies, procedures, technologies, and behaviours aimed at safeguarding data, networks, systems, and digital infrastructure from unauthorised access, alteration, or disruption (NIST, 2018). Beyond its technical scope, cybersecurity has gained prominence across subnational, national, and international governance structures as states and institutions respond to escalating digital threats and transnational cyber risks. The relationship between cybercrime and cybersecurity has become increasingly interwoven. Cybercrimes are frequently framed as direct threats to cybersecurity, a development that has contributed to the growing involvement of national security institutions in cybercrime prevention, detection, and response activities. Despite these developments, however, the fields of cyber criminology and cybersecurity remain largely segmented in both theoretical and practical terms, thereby limiting opportunities for meaningful interdisciplinary engagement and knowledge exchange. This article adopts a conceptual and interdisciplinary analytical approach, drawing on existing criminological, cybersecurity, and security governance literature to examine the relationship between cybercrime and cybersecurity. It synthesises key theoretical perspectives and applies Brodeur's (2010) distinction between “high” and “low” policing as an analytical framework to explore the convergence of crime control and security governance in cyberspace. The article argues that stronger intellectual and operational linkages between cyber criminology and cybersecurity are necessary to effectively respond to the evolving nature of digital threats. Within Brodeur's framework, cybercrime is positioned at one end of the continuum, traditionally associated with the functions of low policing, while cybersecurity is situated at the opposite end, increasingly aligned with high-policing institutions concerned with intelligence, national security, and strategic risk management. By situating cybercrime and cybersecurity within a unified analytical framework, the article highlights the increasingly blurred boundaries between crime control and security governance in digital environments. This perspective contributes to a more integrated understanding of contemporary cyber threats and underscores the need for closer collaboration between cybercrime and cybersecurity researchers, policymakers, and practitioners. Ultimately, the article advances a unifying approach that promotes cross-fertilisation between the two fields and supports the development of more comprehensive and coherent responses to emerging challenges in cyberspace.