Characterizing the redundancy of DarkWeb .onion services

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

Abstract

The Darkweb hosts a number of legal and illegal services that are hard to reach due to the lack, by design, of a regular ‘name service’ as those operated by DNSs on the clearnet. This difficulty, together with the continuous appearance of decoy mirror services and replicated domains, severely limits the investigation capabilities of researchers and law enforcement agencies interested in measuring the Darkweb phenomenon as a whole. To address this issue we developed MASSDEAL, a tool for the automated exploration of the Darkweb that automatically learns about new or previous unseen services and measures repeatedly across time and space (i.e. across multiple deployments of the same service). Relying on data collected over more than 20 thousand darkweb services sampled from September 2018 to January 2019, we perform and report an extensive analysis of service redundancy and measure the appearance of .onion mirrors as well as providing an estimation of the infrastructural redundancy behind those systems.
Original languageEnglish
Title of host publicationProceedings of the 14th International Conference on Availability, Reliability and Security, ARES 2019
Place of PublicationNew York
PublisherAssociation for Computing Machinery, Inc
Number of pages10
ISBN (Electronic)978-1-4503-7164-3
DOIs
Publication statusPublished - 26 Aug 2019
Event14th International Conference on Availability, Reliability and Security -
Duration: 26 Aug 201929 Aug 2019

Publication series

NameACM International Conference Proceeding Series

Conference

Conference14th International Conference on Availability, Reliability and Security
Period26/08/1929/08/19

Fingerprint

Redundancy
Law enforcement
Mirrors

Cite this

Burda, P., Boot, C., & Allodi, L. (2019). Characterizing the redundancy of DarkWeb .onion services. In Proceedings of the 14th International Conference on Availability, Reliability and Security, ARES 2019 [19] (ACM International Conference Proceeding Series). New York: Association for Computing Machinery, Inc. https://doi.org/10.1145/3339252.3339273
Burda, Pavlo ; Boot, Coen ; Allodi, Luca. / Characterizing the redundancy of DarkWeb .onion services. Proceedings of the 14th International Conference on Availability, Reliability and Security, ARES 2019. New York : Association for Computing Machinery, Inc, 2019. (ACM International Conference Proceeding Series).
@inproceedings{d317f87cefed4d39b6aba73c185c6b01,
title = "Characterizing the redundancy of DarkWeb .onion services",
abstract = "The Darkweb hosts a number of legal and illegal services that are hard to reach due to the lack, by design, of a regular ‘name service’ as those operated by DNSs on the clearnet. This difficulty, together with the continuous appearance of decoy mirror services and replicated domains, severely limits the investigation capabilities of researchers and law enforcement agencies interested in measuring the Darkweb phenomenon as a whole. To address this issue we developed MASSDEAL, a tool for the automated exploration of the Darkweb that automatically learns about new or previous unseen services and measures repeatedly across time and space (i.e. across multiple deployments of the same service). Relying on data collected over more than 20 thousand darkweb services sampled from September 2018 to January 2019, we perform and report an extensive analysis of service redundancy and measure the appearance of .onion mirrors as well as providing an estimation of the infrastructural redundancy behind those systems.",
author = "Pavlo Burda and Coen Boot and Luca Allodi",
year = "2019",
month = "8",
day = "26",
doi = "10.1145/3339252.3339273",
language = "English",
series = "ACM International Conference Proceeding Series",
publisher = "Association for Computing Machinery, Inc",
booktitle = "Proceedings of the 14th International Conference on Availability, Reliability and Security, ARES 2019",
address = "United States",

}

Burda, P, Boot, C & Allodi, L 2019, Characterizing the redundancy of DarkWeb .onion services. in Proceedings of the 14th International Conference on Availability, Reliability and Security, ARES 2019., 19, ACM International Conference Proceeding Series, Association for Computing Machinery, Inc, New York, 14th International Conference on Availability, Reliability and Security, 26/08/19. https://doi.org/10.1145/3339252.3339273

Characterizing the redundancy of DarkWeb .onion services. / Burda, Pavlo; Boot, Coen; Allodi, Luca.

Proceedings of the 14th International Conference on Availability, Reliability and Security, ARES 2019. New York : Association for Computing Machinery, Inc, 2019. 19 (ACM International Conference Proceeding Series).

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

TY - GEN

T1 - Characterizing the redundancy of DarkWeb .onion services

AU - Burda, Pavlo

AU - Boot, Coen

AU - Allodi, Luca

PY - 2019/8/26

Y1 - 2019/8/26

N2 - The Darkweb hosts a number of legal and illegal services that are hard to reach due to the lack, by design, of a regular ‘name service’ as those operated by DNSs on the clearnet. This difficulty, together with the continuous appearance of decoy mirror services and replicated domains, severely limits the investigation capabilities of researchers and law enforcement agencies interested in measuring the Darkweb phenomenon as a whole. To address this issue we developed MASSDEAL, a tool for the automated exploration of the Darkweb that automatically learns about new or previous unseen services and measures repeatedly across time and space (i.e. across multiple deployments of the same service). Relying on data collected over more than 20 thousand darkweb services sampled from September 2018 to January 2019, we perform and report an extensive analysis of service redundancy and measure the appearance of .onion mirrors as well as providing an estimation of the infrastructural redundancy behind those systems.

AB - The Darkweb hosts a number of legal and illegal services that are hard to reach due to the lack, by design, of a regular ‘name service’ as those operated by DNSs on the clearnet. This difficulty, together with the continuous appearance of decoy mirror services and replicated domains, severely limits the investigation capabilities of researchers and law enforcement agencies interested in measuring the Darkweb phenomenon as a whole. To address this issue we developed MASSDEAL, a tool for the automated exploration of the Darkweb that automatically learns about new or previous unseen services and measures repeatedly across time and space (i.e. across multiple deployments of the same service). Relying on data collected over more than 20 thousand darkweb services sampled from September 2018 to January 2019, we perform and report an extensive analysis of service redundancy and measure the appearance of .onion mirrors as well as providing an estimation of the infrastructural redundancy behind those systems.

UR - http://www.scopus.com/inward/record.url?scp=85071722816&partnerID=8YFLogxK

U2 - 10.1145/3339252.3339273

DO - 10.1145/3339252.3339273

M3 - Conference contribution

T3 - ACM International Conference Proceeding Series

BT - Proceedings of the 14th International Conference on Availability, Reliability and Security, ARES 2019

PB - Association for Computing Machinery, Inc

CY - New York

ER -

Burda P, Boot C, Allodi L. Characterizing the redundancy of DarkWeb .onion services. In Proceedings of the 14th International Conference on Availability, Reliability and Security, ARES 2019. New York: Association for Computing Machinery, Inc. 2019. 19. (ACM International Conference Proceeding Series). https://doi.org/10.1145/3339252.3339273