Hacker forums provide valuable insights into the journey taken by wannabe hackers into fully fledged criminals, according to research by Imperva.

The company has spent four years monitoring and analysing a forum with 250,000 members, and although it is not solely a meeting place for criminals, the site shows us how users take their first steps towards crime. “Typically, once hackers have gained enough of a reputation they go to a more hardcore, by-invite-only forum,” says Imperva.

Like many large forums of its kind the site provides powerful search tools for members – also a useful tool for security researchers. Over the year to June 2011 some 25% of discussion threads were given over to training for aspiring hackers, says Imperva. Members are directed to online tutorials covering technical topics such as SQL injection as well as tips on non-technical areas of interest such as social engineering.

Much of this training material appears to be well thought-out and produced, including videos, screencasts, and case studies. The site also shows how more experienced hackers boost their reputations, inviting other members to rate their exploits, said Imperva.

It is also a useful barometer of where the interest of hackers is directed – DDOS and SQL injection account for around 40% of all attack techniques discussed in the last year, and overall, threads devoted to attack techniques have increased significantly year on year. Threads dedicated to mobile platforms more than doubled in the period 2009-10.

Members have access to messaging services for collaboration, and for selling stolen data such as credit card information. But the site is clearly more than a simple market place – it is a genuine community with space set aside for discussion of broader “lifestyle” issues, Imperva concludes.