Introduction
For many internet users, Google Search acts as the gateway to the digital world, providing access to a vast array of information on easily searchable common domains. However, beyond this familiar surface lies the hidden depths of the internet – the “deep web.” The deep web constitutes a significant portion of the internet, containing unstructured data from sensors, temporary pages, and content concealed behind password protection, similar to your public library or workplace resources.
Moreover, there exists another layer known as the “dark web,” a smaller but more elusive part of the internet. Accessible solely through specialized browsers like the Onion Router (TOR) and I2P, the dark web remains hidden from conventional search engines. Websites on the dark web are identified by unique sixteen-digit strings of alphanumeric characters, and their content is often traded privately among users. Unfortunately, these sites have gained notoriety for facilitating illegal activities, including the exchange of sex, drugs, and even trading and selling computer vulnerabilities.
The Quest for Business Intelligence in the Dark Web
Recently, at the RSA Conference in San Francisco, Silobreaker, an intelligence platform, joined forces with Flashpoint, a company specializing in business risk intelligence. Their collaboration aims to help businesses navigate the closed communities of the dark web, comprehend the modus operandi of adversaries, and differentiate fact from fiction.
Rather than engaging in covert or hidden activities, both companies rely on open-source intelligence (OSINT) from public sources. On the conventional internet, OSINT would involve monitoring social media platforms like Twitter for relevant intelligence. However, in the realm of the dark web, OSINT takes the form of gaining memberships in various forums where crucial discussions and information exchange occur.
Flashpoint, for instance, diligently monitors around 330 forums on the dark web. Understanding the context and culture of these forums is vital, as the language used may be coded and indirect. For example, discussions about trading an exploit for “500 doughnuts” would require knowledge that “doughnuts” actually signifies dollars. Additionally, the need to address localization issues further complicates the task, prompting Flashpoint to employ linguists who can navigate through various vernaculars.
Leveraging User-Friendly Interfaces and Advanced Search Techniques
Silobreaker contributes a user-friendly interface that empowers information security researchers to conduct efficient searches. Utilizing this interface, researchers can input specific phrases or terms to search for relevant information. For instance, researchers can enter the common name of a recent vulnerability to search for mentions in different languages and corresponding Common Vulnerabilities and Exposures (CVE) numbers.
Other searches may involve more direct queries, such as seeking mentions of a particular credit card number or social security number across various forums. The results of such searches provide insights into how extensively certain personal IDs are being discussed or traded within these forums.
The Dark Web in Law Enforcement: Combating Sex Trafficking
It is worth noting that the concept of searching the dark web is not entirely novel. DARPA, the U.S. military’s Defense Advanced Research Projects Agency, has been developing a search engine called Memex specifically for law enforcement to combat sex trafficking on the dark web.
Since its inception in 2014, the development of Memex has incurred a cost of $67 million for DARPA. The initiative involves collaborations with commercial agents, universities, and other entities to develop the necessary technology. Presently, more than 33 law enforcement agencies utilize the tools provided by Memex to combat sex trafficking.
The goal of Memex is to shed light on the footprint of human trafficking within online spaces, whether on the dark web or the open web. The anonymity of the dark web provides fertile ground for nefarious activities, including sex trafficking. The search technology developed by DARPA aids investigators in identifying signals and patterns associated with sex trafficking, such as recurring phone numbers used by trafficking organizations or identifiable branding tattoos in online photos. By extending existing search capabilities to analyze images and networks of individuals, the tools enhance the intelligence required to detect and combat sex trafficking rings and related criminal behaviors online.
Conclusion
The dark web presents a realm of opportunities and challenges for businesses and law enforcement alike. Companies like Silobreaker and Flashpoint endeavor to navigate these uncharted territories and extract valuable business intelligence from closed dark web communities. Their utilization of open-source intelligence and user-friendly interfaces helps researchers make sense of contextual language and cultural references used on the dark web forums.
In the realm of law enforcement, DARPA’s Memex project stands as a significant effort to tackle sex trafficking by illuminating the activities of criminals operating in the dark web’s shadows. As technology evolves and security concerns continue to mount, the quest for business intelligence and the fight against illegal activities on the dark web remain ongoing battles for organizations and authorities. The pursuit of a safer and more informed digital world fuels innovation, collaboration, and the relentless commitment to staying one step ahead in the ever-evolving landscape of the internet.
