The Dark Web: What It Is And How It Works

We often hear about the dark web being linked to terrorist plots, drug deals, knife sales and child pornography, but beyond this it can be hard to fully understand how the dark web works and what it looks like.

So just for a minute imagine that the whole internet is a forest, a vast expanse of luscious green as far as the eye can see. And in the forest are well worn paths, to get from A to B. Think of these paths as popular search engines, like Google, allowing you as the user the option to essentially see the wood from the trees and be connected. But away from these paths, and away from Google, the trees of the forest mask your vision.

Off the paths it is almost impossible to find anything, unless you know what you’re looking for, so it feels a bit like a treasure hunt. Because really the only way to find anything in this vast forest is to be told where to look. This is how the dark web works, and it is essentially the name given to all the hidden places on the Internet.

Just like the forest, the dark web hides things well, it hides actions and it hides identities. The dark web also prevents people from knowing who you are, what you are doing and where you are doing it. It is not surprising, then, that the dark web is often used for illegal activity and that it is hard to police.

Technical Challenges

Dark web technologies are robustly built without central points of weakness, making it hard for authorities to infiltrate. Another issue for law enforcement is that – like most things – the dark web and its technologies can also be used for both good and evil.

So in the same way criminals use it to hide what they are up to, it can also help groups fight oppression or individuals to whistle blow and exchange information completely anonymously.

In fact, Tor, “free software and an open network that helps you defend against traffic analysis” and a critical part of the so-called dark web, has been funded by a range of Western governments, including the US.

A service like Tor, is global, in no one physical location, and is operated by no one commercial entity, which is typical of these technologies.

Theoretically, the only way to intercept communications sent via something like Tor is to install a “backdoor” in the application everyone uses. A backdoor is meant to provide a secret way to bypass an application’s protection systems, in a similar way to how people hide backdoor keys in flower pots in the garden in case they get locked out of their house.

However, the use of a “backdoor” could also allow any governments, even oppressive ones, to intercept communications. Indeed, cyber breaches have shown us that any backdoor or weakness can be found and exploited by hackers in order to steel people’s information, pictures and data.

Exploiting the Darkness

Of course, none of this is new, criminals have always found ways to communicate with each other “under the radar”. Mobile phones have been used by criminal gangs to organise themselves for a long time, and as a society we are comfortable with laws enabling police to tap telephones and catch criminals.

Unfortunately, infiltrating the dark web is not quite as easy as tapping the local telephone exchange or phone network. Because the dark web is quite unlike the telephone system, which has fixed exchanges and is operated by a small set of companies, making interception easier.

Even if tapping the dark web was a straightforward exercise, morally it is still fraught with questions. In the UK, the Investigatory Powers Bill, dubbed the snoopers’ charter, sets out the powers and governance for Law Enforcement over communications systems. 

However, the discussion of the bill has been impacted by the Snowden revelations which have demonstrated that society is not comfortable with mass, unwarranted surveillance.

This public distrust has led to many technology companies pushing back when it comes to accessing users’ devices. We have seen Microsoft take on the US government over access to email and Apple against the FBI when petitioned to unlock an iPhone of a known terrorist.

And yet some of these same communications companies have been harvesting user data for their own internal processes. Famously, Facebook enabled encryption on WhatsApp, protecting the communications from prying eyes, but could still look at data in the app itself.

For now, though, it is clear that we still have a long way to go until society, government, law enforcement and the courts settle on what is appropriate use of surveillance both on and offline. And until then we will have to live with the fact that the one person’s freedom fighting dark web is another’s criminal paradise.

WeForum

You Might Also Read:

A Quick Tour Of Cybercrime’s Underground:

The Dark Web Is Hidden In Plain Sight:

Stolen Health Records Flooding Dark Web Markets:

Cyber Criminals Are Making $200k A Month:

 

 

« The Next Big Conflict Will Turn On Artificial Intelligence
Cybercrime Cost The Global Economy $450Billion In 2016 »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Webroot

Webroot

Webroot delivers next-generation endpoint security and threat intelligence services to protect businesses and individuals around the globe.

SecDev

SecDev

SecDev is a consulting firm working at the intersection of geopolitical, digital, urban, energy and cyber risk.

Hotlava Systems

Hotlava Systems

HotLava network adapters enable today's powerful servers and workstations to deliver more productivity by reducing congestion at the network interface.

Information Security Research Association (ISRA)

Information Security Research Association (ISRA)

ISRA is a non-profit organization focused on various aspects of Information Security including security research and cyber security awareness activities.

Mitchell Sandham

Mitchell Sandham

Mitchell Sandham is an, independent insurance and financial services brokerage. Business products include Cyber/Privacy Liability insurance.

Pryv

Pryv

Pryv is a Swissmade software for privacy, personal data collection, usage, sharing and storage.

Joint Accreditation System of Australia and New Zealand (JASANZ)

Joint Accreditation System of Australia and New Zealand (JASANZ)

JASANZ is the joint national accreditation body for Australia and New Zealand. The directory of members provides details of organisations offering certification services for ISO 27001.

CyberGuru

CyberGuru

CyberGuru is a service provided by CyberSecurity Malaysia specializing in cyber security professional training and development.

About Cyber Security.

About Cyber Security.

About Cybersecurity provides a galaxy-wide knowledge base of cybersecurity tactics and techniques derived from actual experience.

Satori Cyber

Satori Cyber

The Satori Cyber Secure Data Access Cloud is the first solution on the market to offer continuous visibility and granular control for data flows across all cloud and hybrid data stores.

Mindsight

Mindsight

Mindsight is a technology consulting firm with expertise from cybersecurity to cloud, disaster recovery to infrastructure, and collaboration to contact center.

Timus Networks

Timus Networks

Timus Networks enables today's work from anywhere organizations to secure their networks very easily and cost effectively.

Nicoll Curtin

Nicoll Curtin

Nicoll Curtin is a global company with over 20 years of experience in connecting outstanding talent with industry leading companies within Technology, Change and Cyber Security.

Versent

Versent

Versent is an Australian-born technology company, focused on architecting, building & operating cloud native applications, data streams, platforms, and services.

Phone Monitoring Service

Phone Monitoring Service

Phone Monitoring Service provides cyber security services, ethical hacking services, social media hacking services in the USA, Canada, Europe.

Cyberagentur (Cyber Agency)

Cyberagentur (Cyber Agency)

Cyberagentur is the Federal Agency in Germany for innovation in cybersecurity. Our mission is to advance research and groundbreaking innovations in the field of cybersecurity and related technologies.