Academic literature on the topic 'Dark Web'

El texto completo de este trabajo no está disponible en el Repositorio Académico UPC por restricciones de la casa editorial donde ha sido publicado.<br>In this article, we propose a reference model to identify the maturity level of the cyber intelligence threat process. This proposal considers the dark web as an important source of cyber threats causing a latent risk that organizations do not consider in their cybersecurity strategies. The proposed model aims to increase the maturity level of the process through a set of proposed controls according to the information found on the dark web. The model consists of three phases: (1) Identification of information assets using cyber threat intelligence tools. (2) Diagnosis of the exposure of information assets. (3) Proposal of controls according to the proposed categories and criteria. The validation of the proposal was carried out in an insurance institution in Lima, Peru, with data obtained by the institution. The measurement was made with artifacts that allowed to obtain an initial value of the current panorama of the company. Preliminary results showed 196 emails and passwords exposed on the dark web of which one corresponded to the technology manager of the company under evaluation. With this identification, it was diagnosed that the institution was at a “Normal” maturity level, and from the implementation of the proposed controls, the “Advanced” level was reached.<br>Revisión por pares

This diploma thesis analyzes the deep web environment with the use of business models from the surface web. In the indroduction part of the thesis summarize terms web, deep web and dark web, these terms are intermingle the entire thesis, also brings the concept on Onion routing with use of Tor software. An inseparable part is the comparsion of tools which can be used for access to the dark web. The main part of the thesis analyzes most used business models on the surface web including their methods of monetization and after that author tries to apply these models in the dark web environment. An importat part of this work is the analysis a type of services occuring on the dark web and mutual comparison of several sub-criteria of each service. In the final part the thesis presents project Turris on which is applied to create a relay node for the Tor network.

La web oscura es una zona propicia para actividades ilegales de todo tipo. En los últimos tiempos los cibercriminales están cambiando su enfoque hacia el tráfico de informacion (personal o corporativa) porque los riesgos son mucho más bajos en comparación con otros tipos de delito. Hay una gran cantidad de información alojada aquí, pero pocas compañías saben cómo acceder a estos datos, evaluarlos y minimizar el daño que puedan causar. El presente trabajo propone un modelo de referencia para identificar el nivel de madurez del proceso de Ciber Inteligencia de Amenazas. Esta propuesta considera la información comprometida en la web oscura, originando un riesgo latente que las organizaciones no consideran en sus estrategias de ciberseguridad. El modelo propuesto tiene como objetivo aumentar el nivel de madurez del proceso mediante un conjunto de controles propuestos de acuerdo a los hallazgos encontrados en la web oscura. El modelo consta de 3 fases:1. Identificación de los activos de información mediante herramientas de Ciber inteligencia de amenazas. 2. Diagnóstico de la exposición de los activos de información. 3. Propuesta de controles según las categorías y criterios propuestos. La validación de la propuesta se realizó en una institución de seguros en Lima, Perú con datos obtenidos por la institución. Los resultados preliminares mostraron 196 correos electrónicos y contraseñas expuestos en la web oscura de los cuales 1 correspondía al Gerente de Tecnología. Con esta identificación, se diagnosticó que la institución se encontraba en un nivel de madurez “Normal”, y a partir de la implementación de los controles propuestos se llegó al nivel “Avanzado”.<br>The dark web is an area conducive to illegal activities of all kinds. In recent times, cybercriminals are changing their approach towards information trafficking (personal or corporate) because the risks are much lower compared to other types of crime. There is a wealth of information hosted here, but few companies know how to access this data, evaluate it, and minimize the damage it can cause. In this work, we propose a reference model to identify the maturity level of the Cyber ​​Intelligence Threat process. This proposal considers the dark web as an important source of cyber threats causing a latent risk that organizations do not consider in their cybersecurity strategies. The proposed model aims to increase the maturity level of the process through a set of proposed controls according to the information found on the dark web. The model consists of 3 phases: 1. Identification of information assets using cyber threat intelligence tools. 2. Diagnosis of the exposure of information assets. 3. Proposal of controls according to the proposed categories and criteria. The validation of the proposal was carried out in an insurance institution in Lima, Peru with data obtained by the institution. Preliminary results showed 196 emails and passwords exposed on the dark web of which 1 corresponded to the Technology Manager of the company under evaluation. With this identification, it was diagnosed that the institution was at a “Normal” maturity level, and from the implementation of the proposed controls the “Advanced” level was reached.<br>Tesis

Existe no ciberespaço uma web escura e escondida denominada Dark Web. Nesse viés, esta pesquisa objetivou topografar a Dark Web e seus não lugares no Ciberespaço e como objetivos específicos: reunir brevemente as dobras visíveis do ciberespaço; caracterizar as dobras invisíveis do ciberespaço; investigar as especificidades da Dark Web em relação à definição, localização, acesso, conteúdo e mecanismos de busca; contextualizar os seus não lugares de acordo com os preceitos de Augé (2012) e Bauman (2001) e construir um Mapa Conceitual para demonstrar a topografia da Dark Web graficamente. Como procedimento metodológico, esta pesquisa se baseou no método indutivo informal com uso de um formulário para coletar dados na Dark Web. O método dedutivo formal foi utilizado por meio de um corpus teórico a partir do conceito de não lugares para a Dark Web. O estudo teve natureza básica com delineamento documental e abordagem qualitativa. Nas dobras visíveis do ciberespaço foram conceituadas a Web Visível, Indexável ou da Superfície, a Web 2.0 ou Social e a Web 3.0 ou Semântica. Já nas dobras invisíveis, procurou-se definir a Web Invisível ou Deep Web, a Web Oculta, a Web Privada e a Web Verdadeiramente Invisível. A Dark Web foi discutida como a dobra mais profunda e escura do ciberespaço e a Darknet foi dialogada como representante de uma internet escura por redes como o Tor, Freenet e I2P. Os principais resultados demonstram que os conteúdos informacionais da Dark Web são em sua maioria de má índole com envolvimento de crimes pertencentes ao lado da pílula vermelha de The Matrix, o filme. Pressupõe-se com observações no ambiente que 80% dos conteúdos do ambiente esteja no lado da pílula vermelha e 20% no lado azul. Foi considerado que os pontos positivos da Dark Web são a navegação anônima, livre do recebimento de propagandas e de informações estatísticas que geram negócios lucrativos aos mecanismos de busca e também o fato de descartar possíveis espionagens. Com intuito de constituir privacidade no ciberespaço, a navegação nas dobras invisíveis como na Dark Web são também opções que se fomentam como boas práticas no ambiente. A realização de buscas por meio de um mecanismo que opera tanto na superfície quanto na Dark Web, também são destaque nesta pesquisa.Também foi possível identificar que devido a falta de identidade, relação e historicidade com as dobras invisíveis como a Dark Web, esta torna-se um não lugar em essência. A falta de civilidade e interação humana e a característica de ser um lugar de passagem mais uma vez atestaram para a comprovação da Dark Web como um não lugar. O Mapa Conceitual a respeito da Dark Web visou demonstrar a topografia do ambiente, as descobertas conceituais e a relação do objeto estudado com os demais dispersos principalmente sob as dobras do ciberespaço. Acredita-se que os resultados alcançados com este estudo possam contribuir com a CI e ampliar horizontes para outras pesquisas a respeito da temática que é inédita no Brasil.<br>There is in the cyberspace a dark and hidden web called Dark Web. With this bias, this study aimed to topograph the Dark Web and its non-places in the Cyberspace, with the following specific objectives: gather briefly visible folds of the cyberspace; characterize the invisible folds of the cyberspace; investigate the specificities of the Dark Web in relation to definition, location , access, content, and search engines; contextualize its non-places according to the precepts by Augé (2012 ) and Bauman (2001 ) and construct a Conceptual Map to show the topography of the Dark Web graphically. As a methodological approach this research was based on the informal inductive method using a form to collect data in the Dark Web. The formal deductive method was used by means of a theoretical corpus from the concept of non-places for the Dark Web. It was a basic-natured study with documentary design and qualitative approach. In the visible folds of cyberspace, the Visible, Indexable or Surface Web, Web 2.0 or Social, Web 3.0 or Semantic were conceptualized. As for the invisible folds, we sought to define the Invisible Web or Deep Web, the Hidden Web, the Private Web and the Truly Invisible Web. The Dark Web was discussed as the deepest, darkest fold of cyberspace and the Darknet was dialogued as representative of a dark internet for networks like Tor, Freenet and I2P. The main results show that the informational content of the Dark Web are mostly related to illicit activities involving crimes belonging to the red pill from the film The Matrix. It is assumed that, with observations of the environment, 80% of the contents of the environment are on the red pill side and 20% on the blue pill side. It was considered that the positive aspects of the Dark Web is the anonymous navigation, free from advertisements and statistical information that generate profitable business, to search engines, and also the fact of ruling out possible espionage. In order to provide privacy in cyberspace, navigating the invisible folds as in the Dark Web are also options that are considered good practices in the environment. Searches carried out through a mechanism that operates both on the surface and in the Dark Web, are also highlighted in this research. It was also possible to observe that, due to lack of identity, relationship and historicity with invisible folds as the Dark Web, this becomes a non -place in essence. The lack of civility and human interaction and the characteristic of being a temporary place once again testified that the Dark Web is a non-place. The Conceptual Map about the Dark Web aimed to demonstrate the topography of the environment, the conceptual discoveries and the relation of the studied object with the other scattered matter mainly in the folds of cyberspace. It is believed that the results obtained from this study may contribute to the Information Science (IS) and broaden horizons for further research on the topic that is unprecedented in Brazil.