1 1 00:00:00,120 --> 00:00:01,680 In this lesson, we're going to discuss 2 2 00:00:01,680 --> 00:00:03,360 the deep web and the dark web 3 3 00:00:03,360 --> 00:00:04,650 and how they relate to our role 4 4 00:00:04,650 --> 00:00:06,450 as cybersecurity analysts. 5 5 00:00:06,450 --> 00:00:08,820 Now, the deep web and the dark web are both parts 6 6 00:00:08,820 --> 00:00:10,770 of the internet that are not easily accessible 7 7 00:00:10,770 --> 00:00:12,240 through traditional search engines 8 8 00:00:12,240 --> 00:00:15,150 such as Google or Bing or something like that. 9 9 00:00:15,150 --> 00:00:17,520 However, these two terms do not relate 10 10 00:00:17,520 --> 00:00:18,930 to the exact same thing. 11 11 00:00:18,930 --> 00:00:20,880 So I think it's important that we start out 12 12 00:00:20,880 --> 00:00:24,390 by defining what we mean by the deep web and the dark web. 13 13 00:00:24,390 --> 00:00:26,370 Now, the deep web is going to refer to the portion 14 14 00:00:26,370 --> 00:00:29,280 of the internet that is not indexed by search engines. 15 15 00:00:29,280 --> 00:00:31,410 This includes search engines like Google or Bing 16 16 00:00:31,410 --> 00:00:32,700 and other ones like that 17 17 00:00:32,700 --> 00:00:34,080 and this means that we're looking at things 18 18 00:00:34,080 --> 00:00:36,660 like private databases, subscription-based websites 19 19 00:00:36,660 --> 00:00:39,480 and other content that is not publicly accessible. 20 20 00:00:39,480 --> 00:00:41,490 For example, if you need to access medical 21 21 00:00:41,490 --> 00:00:43,680 and scientific research, university libraries 22 22 00:00:43,680 --> 00:00:45,120 and government database, 23 23 00:00:45,120 --> 00:00:47,880 all these could be considered part of the deep web. 24 24 00:00:47,880 --> 00:00:48,870 It's important to realize 25 25 00:00:48,870 --> 00:00:51,030 that the deep web contains sensitive information 26 26 00:00:51,030 --> 00:00:53,430 that is not meant to be searchable by the general public 27 27 00:00:53,430 --> 00:00:55,830 and the majority of it is not considered illegal 28 28 00:00:55,830 --> 00:00:58,170 or malicious or nefarious. 29 29 00:00:58,170 --> 00:01:01,200 On the other hand, the dark web refers to a specific part 30 30 00:01:01,200 --> 00:01:03,660 of the deep web that's used for illegal activities 31 31 00:01:03,660 --> 00:01:06,180 such as the buying and selling of drugs, weapons 32 32 00:01:06,180 --> 00:01:09,300 and stolen personal information such as credit card data. 33 33 00:01:09,300 --> 00:01:11,730 When you think about the dark web, often you associate it 34 34 00:01:11,730 --> 00:01:14,070 with things like anonymity and encryption 35 35 00:01:14,070 --> 00:01:15,900 and this allows people to remain hidden 36 36 00:01:15,900 --> 00:01:18,090 in terms of their location and their activity 37 37 00:01:18,090 --> 00:01:19,860 whenever they're using the dark web 38 38 00:01:19,860 --> 00:01:21,150 and this helps hide their activities 39 39 00:01:21,150 --> 00:01:23,520 from law enforcement and other authorities. 40 40 00:01:23,520 --> 00:01:25,740 The dark web is considered to be really rich 41 41 00:01:25,740 --> 00:01:28,080 in criminal activity and it's a high risk area 42 42 00:01:28,080 --> 00:01:31,320 where hacking and illicit activities occur all of the time. 43 43 00:01:31,320 --> 00:01:32,700 Now, accessing the dark web 44 44 00:01:32,700 --> 00:01:34,500 does require specialized software 45 45 00:01:34,500 --> 00:01:36,990 such as using Tor, which is the onion router 46 46 00:01:36,990 --> 00:01:39,240 and knowledge of how to navigate the dark web, 47 47 00:01:39,240 --> 00:01:41,340 as well as taking extensive security measures 48 48 00:01:41,340 --> 00:01:42,660 to protect the user's identity 49 49 00:01:42,660 --> 00:01:45,120 and location when you're accessing it. 50 50 00:01:45,120 --> 00:01:46,620 Now, the dark web was never designed 51 51 00:01:46,620 --> 00:01:49,350 to be used by general users and accessing the dark web 52 52 00:01:49,350 --> 00:01:51,300 without appropriate knowledge and precautions 53 53 00:01:51,300 --> 00:01:52,530 can really put you at risk 54 54 00:01:52,530 --> 00:01:54,780 of encountering illegal activities, malware, 55 55 00:01:54,780 --> 00:01:57,180 or being targeted by cyber criminals. 56 56 00:01:57,180 --> 00:01:59,730 So how can a cybersecurity professional use 57 57 00:01:59,730 --> 00:02:01,230 these two areas of the internet, 58 58 00:02:01,230 --> 00:02:02,760 the deep web and the dark web 59 59 00:02:02,760 --> 00:02:05,010 to better protect their enterprise networks? 60 60 00:02:05,010 --> 00:02:06,870 Well, let's start out with the deep web. 61 61 00:02:06,870 --> 00:02:08,850 Cybersecurity professionals can use the deep web 62 62 00:02:08,850 --> 00:02:10,890 as a source of information to gather intelligence 63 63 00:02:10,890 --> 00:02:12,330 on potential threats. 64 64 00:02:12,330 --> 00:02:14,370 This can include researching known vulnerabilities 65 65 00:02:14,370 --> 00:02:16,140 and specific systems or software, 66 66 00:02:16,140 --> 00:02:17,700 as well as monitoring for new exploits 67 67 00:02:17,700 --> 00:02:20,400 or attack methods that have been developed by hackers. 68 68 00:02:20,400 --> 00:02:21,720 This information can then be used 69 69 00:02:21,720 --> 00:02:23,700 to develop more effective security strategies 70 70 00:02:23,700 --> 00:02:26,760 and improve the overall security of your enterprise network. 71 71 00:02:26,760 --> 00:02:29,100 Now, when it comes to the dark web, on the other hand, 72 72 00:02:29,100 --> 00:02:30,840 cybersecurity professionals are going to use this 73 73 00:02:30,840 --> 00:02:33,090 to monitor for stolen data or information 74 74 00:02:33,090 --> 00:02:35,130 that's related to their organization. 75 75 00:02:35,130 --> 00:02:36,630 This can include things like employee 76 76 00:02:36,630 --> 00:02:39,390 or customers personal information, login credentials 77 77 00:02:39,390 --> 00:02:41,400 or sensitive intellectual property. 78 78 00:02:41,400 --> 00:02:42,750 By monitoring the dark web, 79 79 00:02:42,750 --> 00:02:44,790 cybersecurity professionals can quickly identify 80 80 00:02:44,790 --> 00:02:46,800 if your information has been compromised 81 81 00:02:46,800 --> 00:02:48,210 and they can then take appropriate action 82 82 00:02:48,210 --> 00:02:51,210 to help protect their organization and your information. 83 83 00:02:51,210 --> 00:02:53,610 Cybersecurity professionals can also use the dark web 84 84 00:02:53,610 --> 00:02:55,050 to track the activities of known 85 85 00:02:55,050 --> 00:02:57,000 or suspected cyber criminal groups, 86 86 00:02:57,000 --> 00:02:59,100 to identify any patterns or trends in their methods 87 87 00:02:59,100 --> 00:03:01,200 and techniques and other changes that are happening 88 88 00:03:01,200 --> 00:03:02,850 in the criminal underworld. 89 89 00:03:02,850 --> 00:03:04,500 This information can then all be used 90 90 00:03:04,500 --> 00:03:06,750 to help develop more effective defensive strategies 91 91 00:03:06,750 --> 00:03:09,660 to protect our organizations against future attacks. 92 92 00:03:09,660 --> 00:03:11,220 Another important use of the dark web 93 93 00:03:11,220 --> 00:03:13,140 by cybersecurity professionals is to be able 94 94 00:03:13,140 --> 00:03:15,900 to track the prices and availability of tools and services 95 95 00:03:15,900 --> 00:03:18,060 that are commonly used in cyber attacks. 96 96 00:03:18,060 --> 00:03:19,830 This can help give us an indication of the level 97 97 00:03:19,830 --> 00:03:22,560 of sophistication of cyber criminals and their goals, 98 98 00:03:22,560 --> 00:03:25,830 as well as which types of attacks are trending these days. 99 99 00:03:25,830 --> 00:03:28,740 So when you think about the deep web and the dark web, 100 100 00:03:28,740 --> 00:03:30,690 I want you to remember that it's a powerful resource 101 101 00:03:30,690 --> 00:03:32,610 for us as cybersecurity professionals. 102 102 00:03:32,610 --> 00:03:34,620 We can use the deep web to help gather intelligence 103 103 00:03:34,620 --> 00:03:36,960 on potential threats, while we can use the dark web 104 104 00:03:36,960 --> 00:03:38,400 to monitor for stolen data 105 105 00:03:38,400 --> 00:03:40,530 and track the activities of cyber criminals. 106 106 00:03:40,530 --> 00:03:43,350 This way, we can develop more effective security strategies 107 107 00:03:43,350 --> 00:03:45,210 that better protect our enterprise networks 108 108 00:03:45,210 --> 00:03:46,980 from future cyber attacks. 109 109 00:03:46,980 --> 00:03:48,690 As always though, it's important to note 110 110 00:03:48,690 --> 00:03:50,580 that if you're going to be using the dark web, 111 111 00:03:50,580 --> 00:03:52,950 you must follow best practices in cybersecurity 112 112 00:03:52,950 --> 00:03:54,810 to protect yourself and your network, 113 113 00:03:54,810 --> 00:03:56,880 as well as use the appropriate security measures 114 114 00:03:56,880 --> 00:03:57,960 to ensure that your identity 115 115 00:03:57,960 --> 00:03:59,940 and location are not compromised 116 116 00:03:59,940 --> 00:04:01,680 because you don't want a bunch of cyber criminals 117 117 00:04:01,680 --> 00:04:03,810 going after you personally because they found you 118 118 00:04:03,810 --> 00:04:05,610 on the dark web looking for information 119 119 00:04:05,610 --> 00:04:06,630 on the different types of attacks 120 120 00:04:06,630 --> 00:04:08,273 that they were trying to conduct.