Exploring the Deep Web

More documents

Recommendations

Info

Law enforcement and the Deep WebLaw enforcement agencies already face several existing challenges when it comes to international crime onthe Surface Web [23, 24]. With regard to the Deep Web, three additional aspects can make law enforcementeven more problematic.• Encryption: Everything in the Deep or Dark Web is encrypted. That means the criminals in it are muchmore aware about being trapped or monitored. Encryption is their very first countermeasure to evadedetection.• Attribution: It’s extremely difficult to determine attribution. Everything happens on .onion domains.Routing to these domains is also unclear.• Fluctuation: The Deep Web is a very dynamic place. An online forum can be at a specific URL oneday and gone the next. The naming and address schemes in the Deep Web often change. This meansthat the information we harvested two weeks ago is no longer relevant today. This has implications inproving crime. Considering the time frame in which criminal cases are tried, law enforcers must be ableto rigorously document any criminal online activity via time-stamped screenshots in order to preventcases from becoming invalid.The security vendors’ roleWhile a majority of normal Internet users will not find use for the Deep Web, security vendors must still beable to protect their customers from the cybercriminal activities happening in it. As we’ve shown in previoussections, malware are increasingly using TOR for stealth so security vendors must be able to create earlydetection means and countermeasures against these threats, as they will, sooner or later, find their way tovictimize users on the Surface Web.On the other hand, there are users who, for legitimate reasons, need to visit the Deep Web to avoid the socialpain of buying prescription drugs for certain conditions, access recreational drugs that are illegal in certaingeographical locations, freely discuss socially banned topics, or share information from repressive countrieswith journalists. In these cases, security vendors still have a responsibility to protect their customers. This iswhy Trend Micro and its Forward-Looking Threat Research Team continue to monitor these online territories.38 | Below the Surface: Exploring the Deep Web
SECTION IVThe future of theDeep Web
Page 1 and 2: Below the Surface:Exploringthe Deep
Page 3: Interestin the Deep Web peaked in20
Page 6 and 7: What are the uses of the Deep Web?A
Page 8 and 9: The state of the Deep WebMany studi
Page 10 and 11: Looking at the language distributio
Page 12 and 13: What makes up the Deep Web?Many use
Page 14 and 15: The following table provides a brea
Page 16 and 17: VAWTRAK C&C server that shows a leg
Page 18 and 19: 18 | Below the Surface: Exploring t
Page 20 and 21: The availability of illegal narcoti
Page 22 and 23: Bitcoin and money-laundering servic
Page 24 and 25: Sites that offer counterfeit US$20
Page 26 and 27: Unverified PayPal accounts sold in
Page 30 and 31: Leaked details: Government, law enf
Page 34 and 35: As shown, prices vary based on the
Page 36 and 37: The Deep Web and the real worldMain
Page 40 and 41: The future of the Deep WebWhile pub
Page 42 and 43: ConclusionThe Trend Micro Forward-L
Page 44 and 45: AppendixCatching NionSpy (aka Mewse
Page 46 and 47: References1. The Tor Project, Inc.
Page 48: Created by:The Global Technical Sup

Exploring the Deep Web

Create successful ePaper yourself

Delete template?

Save as template?