Dark web or dark net is one of the three layers of the World Wide Web, comprising clear web, deep web, and dark web. The accessible or visible part of the web can be considered as the tip of the Internet iceberg. Most of the information on the web is in the deep web, which is much larger compared to the size of the surface web. Many of the organization’s valuable assets are exposed for a high risk to criminal activities on Dark Web which they are unaware about. It is important to enterprises to use exceptionally flexible data models capable of collecting information from a wide range of sources, including Clear, Deep and Dark Web, and analyzing them to produce actionable threat intelligence to protect themselves from cyber threats.
Threat actors including hackers, terrorists, industrial spies, organized crime groups, business competitors, and disgruntled insiders share information about various vulnerabilities, exploits, and other sensitive information to other members within the community. They buy and sell tools within darknet marketplaces and forums that could be used in any cyber-attacks. Also, insider information gets traded in Dark Web, which is used to organize active campaigns and digital protests against organizations.
Having Dark Web as a source for threat intelligence is essential in thwarting cybercrimes. Data collected from Dark Web, processed and analyzed could be disseminated to answer different intelligence questions like who, what, where, when, how etc. Threat Intelligence from Dark Web also could be used by organizations for