NAVY Research Group Department of Computer Science Faculty of Electrical Engineering and Computer Science VŠB-TUO

Size: px

Start display at page:

Download "NAVY Research Group Department of Computer Science Faculty of Electrical Engineering and Computer Science VŠB-TUO"

Irma Chandler
6 years ago
Views:

1 NAVY Research Group Department of Computer Science Faculty of Electrical Engineering and Computer Science VŠB-TUO 17. listopadu Ostrava-Poruba Czech Republic Computer Attack and Defense Deep Web Ivan Zelinka MBCS CIPT, Department of Computer Science Faculty of Electrical Engineering and Computer Science, VŠB-TUO 17. listopadu 15, Ostrava-Poruba Czech Republic

2 Deep Web Tady zacnete delat prezentaci a kopirovat-duplikovat slide dal. 2

3 Deep Web According to researchers, only 4% of the internet is visible to the general public the remaining 96% of the internet is made up of The Deep Web The Deep Web is estimated to be 500x the size of the Surface Web 3

4 Deep Web content types Methods which prevent web pages from being indexed: Dynamic content pages generated on the server side and changing content Contextual Web depends on user or user action Private Web site with login or registration Web archives old versions of pages Unlinked content content which is not linked in any page Non-HTML content formats not handled by search engines Limited access content pages with CAPTCHAs or prohibited cached copies Software accessible only with Tor or I2P Scripted content pages only accessible through links produced by JS or Flash 4

5 Surface Web vs. Deep Web vs. Dark Web surface web (Clearnet, crawable Web, public Web) content on the World Wide Web that is available to the general public and for indexing by a search engine deep web the portion of the Internet that is hidden from conventional search engines, as by encryption; the aggregate of unindexed websites Dictionary.com everything what is not a surface web dark web (Darknet) the portion of the Internet that is intentionally hidden from search engines, uses masked IP addresses, and is accessible only with a special web browser: part of the deep web Dictionary.com 5

6 What is Deep Web 1. To produce results, major search engines scour the Web. They follow links to index sites. That is like dragging a net across the surface of the ocean. 2. These nets capture less than 1% of Web content. They totally miss the data behemoths. 3. Ask a database a question, and it generates a unique page. These do not get surfaced to the indexable Web 6

7 What is Deep Web 4. Also hidden are standalone pages and documents behind private networks, like academic journal articles. 5. The most hidden section of the Web is accsessible by tools like Tor. You can only get inside with special software that makes your location anonymous. 7

8 Dark Web (Darknet) is a part of the Deep Web less than 0.01% of the web anonymity commonly associated with the sale of drugs, weapons, counterfeit documents and child pornography, hiring hackers or even assassins helps political dissidents who want to evade government censors human rights activists, journalists, military, law enforcement people one of the first high profile Dark Web sites was the Tor hidden service WikiLeaks created to accept leaks from anonymous sources New Yorker s Strongbox tool, which allows anyone to securely tip the publication s journalists anonymously 8

Even Facebook has launched a Dark Web site aimed at better catering

9 Dark Web SecureDrop - software that integrates with Tor hidden services to let any news organization receive anonymous submissions Even Facebook has launched a Dark Web site aimed at better catering to users who visit the site using Tor to evade surveillance and censorship 9

10 Deep web Onion Router Tor - History began to grow with help from the U.S. military, which sought a way to communicate with intelligence assets and Americans stationed abroad without being detected mathematicians at the Naval Research Laboratory (Paul Syverson, David Goldschlag and Michael Reed) began working on the concept of "onion routing" in 1995 research soon developed into The Onion Router project, better known as Tor, in 1997 with funding from U.S. Department of Defense's Defense Advanced Research Projects Agency (DARPA). this led up to the Free Haven Project, formed in 1999 as a research project by a group of students from the Massachusetts Institute of Technology they develop the first instance of Tor that we're familiar with today The U.S. Navy released the Tor code to the public in

11 Tor (The Onion Router) "Everyone has the right to freedom of opinion and expression; this right includes freedom to hold opinions without interference and to seek, receive and impart information and ideas through any media and regardless of frontiers." (Art. 19, Universal Declaration of Human Rights, 1948) The goal of the Tor project is to provide a censorship-resistant & safer access to the Internet. It is the most widely used free & open source anonymization technique in existence. It also makes it possible to host services like websites in a secure and anonymous fashion ("hidden services"). 11

12 Tor Content that expresses views in opposition to those of the current government, or is related to human rights, freedom of expression, minority rights, and religious movements. 12

13 Tor Hundred thousands of people from China, Iran, Russia, Syria and numerous other authoritarian regimes use Tor every day to access free media. Whistleblowers, journalists and bloggers need additional protection. Tor provides anonymization and encryption for everyone - for free. 13

14 Tor Tor is a valuable tool for Chinese dissidents who can't access sites like Twitter. And it became a valuable tool during the Arab Spring in Iran, Tor usage went from 7,000 users in 2010 to 40,000 users two years later Tor's executive director is working with victims of domestic abuse, who need to communicate without being tracked by their abusers Tor use jumped again in the last year, since the revelation of the National Security Agency's surveillance program 14

Tor How Tor works other options such as I2P and Freenet offer an alternative solution works like a circuit, taking an individual s internet connection and redirecting it through different connection

15 Tor How Tor works other options such as I2P and Freenet offer an alternative solution works like a circuit, taking an individual s internet connection and redirecting it through different connection points (or nodes ) all over the world before delivering it to the desired website systems encrypt web traffic in layers and bounce it through randomly-chosen computers around the world, each of which removes a single layer of encryption before passing the data on to its next hop in the network. That prevents any spy 15

16 Tor How Tor works To create a private network pathway with Tor, the user's software or client incrementally builds a circuit of encrypted connections through relays on the network The circuit is extended one hop at a time, and each relay along the way knows only which relay gave it data and which relay it is giving data to The client negotiates a separate set of encryption keys for each hop along the circuit to ensure that each hop can't trace these connections as they pass through At the most basic level unless you are using encrypted protocols (HTTPS / SSH / TLS), the Tor traffic could be monitored. Here are two simple examples: Using a forum that does not use HTTPS your login, password, session cookie and posts could all be captured. If you send an using SMTP (no TLS) then the could be intercepted. 16

17 Tor How Tor works Instead of taking a direct route from source to destination, data packets on the Tor network take a random pathway through several relays that cover your tracks so no observer at any single point can tell where the data came from or where it's going 17

18 Tor How Tor works Because each relay sees no more than one hop in the circuit, neither an eavesdropper nor a compromised relay can use traffic analysis to link the connection's source and destination 18

19 Tor How Tor works For efficiency, the Tor software uses the same circuit for connections that happen within the same ten minutes or so. Later requests are given a new circuit, to keep people from linking your earlier actions to the new ones. 19

Tor Exit Nodes Exit Nodes are the gateways where encrypted Tor traffic hits the Internet if the exit traffic is unencrypted and contains identifying information then an exit node can be abused The

20 Tor Exit Nodes Exit Nodes are the gateways where encrypted Tor traffic hits the Internet if the exit traffic is unencrypted and contains identifying information then an exit node can be abused The majority of exit nodes are likely not monitored and are "safe", they are managed by good Internet citizens who believe in the aims of the Tor project exit nodes are periodically changed as you use the Tor network exit node can be abused to monitor Tor traffic (after it leaves the onion network) 20

Tor Bridges relays are Tor relays that aren't listed in the main Tor directory The Tor project offers a limited number of bridge addresses, but they might get blocked fast (which is happening in

21 Tor Bridges relays are Tor relays that aren't listed in the main Tor directory The Tor project offers a limited number of bridge addresses, but they might get blocked fast (which is happening in China, for example), or monitored to track down its users. Tor project provide unlisted, private bridge addresses to organizations and journalists, as well as bridges published via the official Torproject distribution network parts of the world block Tor, and users from these countries need Tor bridges to access the uncensored Internet Tor Browser now provides some bridges by default if someone (ISP) is filtering connections to all the known Tor relays, they probably won't be able to block all the bridges 21

22 Tor Exit Nodes 22

Tor - Browser when web users run Tor, any sites they visit can t easily see their IP address web site that itself runs Tor what s known as a Tor hidden service can only be visited by Tor users

23 Tor - Browser when web users run Tor, any sites they visit can t easily see their IP address web site that itself runs Tor what s known as a Tor hidden service can only be visited by Tor users traffic from both the user s computer and the web server takes three hops to a randomly chosen meet-up point in the Tor network, like anonymous bagmen trading briefcases in a parking garage. in Tor you can switch Identity any time or change Security Settings 23

24 Tor - Browser Tor software isn t the only way to access the Deep Web, but it s by far the most efficient and user-friendly It s wedded to the idea of the origins of the Internet, around the intertwining of the cryptography and open-source ethos and philosophy 24

25 Tor - DuckDuckGo Its growth has also made the Deep Web more accessible alternative to Google for hiding identity is DuckDuckGO search engine with no tracking onion.link is global access to Tor's onionsites 25

26 Tor The Hidden Wiki The Hidden Wiki is entery point to Darknet See Contents section for more info on the right side 26

The Silk Road on January 2011 founded by the user 'Dread Pirate Roberts' as of March 2013, the site had 10,000 products for sale by vendors 70% were drugs that are considered contraband in

27 The Silk Road on January 2011 founded by the user 'Dread Pirate Roberts' as of March 2013, the site had 10,000 products for sale by vendors 70% were drugs that are considered contraband in most jurisdictions 340 varieties of drugs were being sold, including heroin The site's terms of service prohibit the sale of "anything who's purpose is to harm or defraud known as ebay of drugs 27

The Silk Road The founder wrote that his creation was intended to enable nonviolent, small-time dealers and to take power away from bloody cartels in October 2013 when the FBI shut down the Silk Road

28 The Silk Road The founder wrote that his creation was intended to enable nonviolent, small-time dealers and to take power away from bloody cartels in October 2013 when the FBI shut down the Silk Road arrested its alleged owner nearly three years of operation on Tor osted approximately 1.5 million transactions worth roughly $1.2 billion multitude of sites rushed to fill the vacuum created when the Silk Road was shut down A sister site, called "The Armory", sold weapons (primarily guns) during 2012, but was shut down due to a lack of demand 28

29 The Silk Road 2.0 was launched just five weeks after its predecessor, closed November 2014 When Silk Road was shut down, the price of bitcoin fell from $140 to $129 in just one day 29

30 The Silk Road 3.0 and Silk Road Reloaded up and running "Silk Road Reloaded" is only accessible by downloading the special I2P software 30

31 VPN virtual private network obscures network traffic from and to your device hide IP address and location encrypt communications avoid censorship and surveillance complete anonymity when using the internet 31

32 peer-to-peer (P2P) networking files are shared through any number of computers connected to the Internet that hold the information you need peer-to-peer (P2P) network is created when two or more PCs are connected and share resources without going through a separate server computer 32

months after founded Silk Road Bitcoin triples in value after 9 months Bitcoin loses over 90% of its

33 Bitcoin virtual currency that makes use of the encrypted peer-to-peer system allows users to conduct business transactions anonymously allowed some users of the currency to engage in illegal aktivity 1 months after founded Silk Road Bitcoin triples in value after 9 months Bitcoin loses over 90% of its value Silk Road 2.0 made Bitcoin triples in value value constantly increase since its inception 33

34 Bitcoin 34

35 Deep web document about Silk Road, Dark Web, freedom 35

36 THANK YOU FOR YOUR ATTENTION 36

37 Copyright This didactic material is meant for the personal use of the student only, and is copyrighted. Its reproduction, even for a partial utilization, is strictly forbidden in compliance with and in force of the law on Authors rights. Copyright NAVY.CS.VSB.CZ 37

The Battle Against Anonymous Browsing: The Security Challenges Presented by Tor

The Battle Against Anonymous Browsing: The Security Challenges Presented by Tor Brief Introduction David A. Vargas Work President, VATG, Inc. Teaching Professor of Networking and Network Security Education