Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

5/10/2019
03:00 PM
Kelly Sheridan
Kelly Sheridan
Slideshows
Connect Directly
Twitter
LinkedIn
Google+
RSS
E-Mail

Demystifying the Dark Web: What You Need to Know

The Dark Web and Deep Web are not the same, neither is fully criminal, and more await in this guide to the Internet's mysterious corners.
2 of 8

What Is the Deep Web?
The Internet can be broken into three general parts, Wilson says. The clear, or surface, Web is the part of the Internet we use every day to check the weather, read the news, and get the latest sports scores. We don't need special technology or credentials to gain access.
Then there is the Deep Web - the part of the Internet not discoverable by standard search engines. It's hard to determine the exact size of the Deep Web because of the sheer number of websites it includes: pages that require logins, for example, and internal company networks. Bank accounts, social media accounts, email accounts, and forums are all part of the Deep Web.
The Deep Web is often conflated with the Dark Web, the third part, because people consider it 'a hidden part' of the Internet, Wilson says. But this is not entirely true - most people use the Deep Web every day. 'You can't find it on Google or other search engines,' she says. 'It's not indexed, but that doesn't mean it's hidden in a nefarious way,' she says. The Deep Web contains a massive number of websites not available on the surface Web, but being hidden does not make them criminal.
Cybercrime does happen on the Deep Web, she adds. Criminals buy and sell credit cards on websites that require login credentials but not access to the Dark Web. 'They're also not trying too hard,' Wilson notes. For greater anonymity, they go to the Dark Web, the part of the Internet most often associated with crime.  
(Image: Serg269 - stock.adobe.com)

What Is the Deep Web?

The Internet can be broken into three general parts, Wilson says. The clear, or surface, Web is the part of the Internet we use every day to check the weather, read the news, and get the latest sports scores. We don't need special technology or credentials to gain access.

Then there is the Deep Web the part of the Internet not discoverable by standard search engines. It's hard to determine the exact size of the Deep Web because of the sheer number of websites it includes: pages that require logins, for example, and internal company networks. Bank accounts, social media accounts, email accounts, and forums are all part of the Deep Web.

The Deep Web is often conflated with the Dark Web, the third part, because people consider it "a hidden part" of the Internet, Wilson says. But this is not entirely true most people use the Deep Web every day. "You can't find it on Google or other search engines," she says. "It's not indexed, but that doesn't mean it's hidden in a nefarious way," she says. The Deep Web contains a massive number of websites not available on the surface Web, but being hidden does not make them criminal.

Cybercrime does happen on the Deep Web, she adds. Criminals buy and sell credit cards on websites that require login credentials but not access to the Dark Web. "They're also not trying too hard," Wilson notes. For greater anonymity, they go to the Dark Web, the part of the Internet most often associated with crime.

(Image: Serg269 stock.adobe.com)

2 of 8
Comment  | 
Print  | 
Comments
Threaded  |  Newest First  |  Oldest First
Aviation Faces Increasing Cybersecurity Scrutiny
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/22/2019
Microsoft Tops Phishers' Favorite Brands as Facebook Spikes
Kelly Sheridan, Staff Editor, Dark Reading,  8/22/2019
MoviePass Leaves Credit Card Numbers, Personal Data Exposed Online
Kelly Sheridan, Staff Editor, Dark Reading,  8/21/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2016-6154
PUBLISHED: 2019-08-23
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect).
CVE-2019-5594
PUBLISHED: 2019-08-23
An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI.
CVE-2019-6695
PUBLISHED: 2019-08-23
Lack of root file system integrity checking in Fortinet FortiManager VM application images of all versions below 6.2.1 may allow an attacker to implant third-party programs by recreating the image through specific methods.
CVE-2019-12400
PUBLISHED: 2019-08-23
In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this im...
CVE-2019-15092
PUBLISHED: 2019-08-23
The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name columns in an exported CSV file created by the WF_CustomerImpExpCsv_Exporter class.