Demystifying the Definitions of the Surface, Deep and Dark Web

1

Brief Bio

� Fadli B. Sidek� Cyber Security Enthusiast� Evening & Weekend Researcher� Huge Interest in Cyber Conflicts, Cyber

Threat Intelligence, Cyber Terrorism and Cyber Realities

� Jack of All Trades� Spoken in BSides Las Vegas (U.S) &

Vienna (Austria), DefCamp (Romania), Defcon (U.S), THC (India), HITB (SGP x 2)

2

Disclaimer

� All views expressed in this presentation are my own and do not represent the opinions of any entity with which i have been, am now, or will be affiliated.

3

� To illustrate the definitions of the 3 layers of the web with practical examples

� Audience/Viewers will � Understand the key differences between the 3

layers.� Question the use of the term/s in current and future

publications.� Have the courage to explore.

Agenda & Key Take away

4

Thou Shalt Google for Answers

5

Misinformation

6

Negative “Experiences”

7

Fear

8

In the News

9

The Famous Iceberg...

10

Surface Web

“The surface Web (also known as the visible Web, indexable Web, or Clearnet) is the portion of content on the World Wide Web that may be indexed by popular search engines.” – Computerhope.com

Definition – Surface Web

11

Definition – Surface Web – Example

12

Deep Web

“The Deep Web, sometimes called the invisible Web, is the large part of the Internet that is inaccessible to conventional search engines.” –Techtarget.com

Definition – Deep Web

13

Indexed

Indexed

Definition – Deep Web – Example

Not Indexed

14

Surface Web

Deep Web

Applying the Iceberg concept

15

More Deep Web Examples

Non-Public Posts

qGovernment/Citizens PortalqProperly Protected DatabasesqCloud StoragesqPassword protected websites/forumsqBanking AccountsqEtc..

16

Deep Web - Size

17

Deep Web – What makes it huge?

18

Demystifying the misconception of the Deep Web/Invisible Web

19

Dark Web

“The Dark Web is classified as a small portion (subset) of the Deep Web that has been intentionally hidden and is inaccessible through standard web browsers. The most famous content that resides on the Dark Web is found in the TOR network (via the TOR browser).” – Brightplanet.com

Definition – Dark Web

20

Dark Web – The 2013 Arrest that made it Famous

21

Dark Activities from the Dark Web in the Media

22

Dark Web – First Case of Singaporean Arrest in 2017

23

“The results suggest that the most common uses for websites on Tor hidden services are criminal, including drugs, illicit finance and pornography involving violence, children and animals.”

Dark Web – Researchers Findings

Cryptopolitik and the Darknet: https://www.tandfonline.com/doi/abs/10.1080/00396338.2016.1142085 24

Dark Web - Size

25

One thing in common

TOR Network

26

Why is it called “Dark” web

� Hidden criminals services accessed via the TOR network

� Media/Journalists/Reporters publications on the illegal activities on the network

� Researchers reports and findings mainly on the cyber-crime related hidden services

27

� The TOR network has been given the impression to be the Dark Side of the Internet because of the hidden mostly “Dark” activities reported by the media and researchers hence coining the term “Dark” web

28

Why is it called “Dark” web

Let’s be specific: Deep Web or Dark Web?

29

Summary

Deep Web Dark WebLarge in size (96%-99% of the entire internet)

Very Small in size (30K sites. Maybe slightly more or less)

Accessible via standard web browsers

Requires TOR browser (for anonymity & encrypted communication)

.com, .org, .net, .gov, ...etc .onionSites are public (Most unindexedcontent can be accessed from the indexed content)

Most sites are hidden

Mostly safe Mostly illegal (as per researchers findings)

30

Dark WebDark Net

31

Dark Net

Dark Net - Definition

32

ØThe darknet – a collection of networks and technologies used to share digital content.

ØThe darknet is not a separate physical network but an application and protocol layer riding on existing networks.

ØExamples of darknets are peer-to-peer file sharing, CD and DVD copying, and key or password sharing on email and newsgroups.

Dark Net – Defined in the Past

33

Dark Nets of the past....

qNapsterqeDonkeyqLimeWireqKaZaaqPerfect Darkq+++ p2p programs

34

What constitute a Dark Net?

Determining What Characteristics Constitute a Darknet: : http://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1151&context=ism 35

High level comparison

“ Darknet has evolved over time to refer collectively to all encryptedcommunication networks that allow anonymous participation, and do so using a de-centralised, peer-to-peer network topology, running inside the Internet.” - http://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1151&context=ism

36

Known Dark Nets (examples)

Encrypted | Anonymous | Few Applications | Hidden | De-centralized and/or Distributed

qTOR Network (2002)qFreeNet (2000)qi2P (2003)qZeroNet (2016)q++++ others

37

Dark Net: TOR’s Dark Web

38

Dark Net: FreeNet

39

Dark Net: i2P

40

Dark Net: ZeroNet

41

Summary: Dark Web vs. Dark Net

� Dark Web Dark Net

� TOR Net(work) is one of the known Dark Nets

� Using TOR browser Accessing the Dark Web

� Dark Web is associated to the hidden dark services hosted and accessible from the TOR network & does not in any way represent the TOR network

42

Dark Net

Dark Net - Definition

43

A Dark Net(work) is a collection of systems/devices within the internet that are decentralized and/or distributed which aims to provide a secure and anonymous browsing via encrypted communication networks using its own special software and/or configurations.

44

Let’s be specific: Dark Net or Dark Web?

Putting it all together

Surface/Visible/Indexed/ Web

Deep/Invisible/Hidden Web

Dark Nets

Indexed content that can be searched/found from

search engines

Un-Indexed content. Databases, Password

Protected sites, Non-public Social media posts

An encrypted net within the

Internet.

45

Clear Net (Unencrypted)

Dark Web

(.onion)

Final Thoughts

46

Q&A

47