WEBVTT 00:00.440 --> 00:08.510 Yes, I know you're probably thinking this is the end list subject, but we are nearing the conclusion 00:08.510 --> 00:13.970 of our discussion on search engines and their function in ethical hacking. 00:14.570 --> 00:20.990 What I wanted to talk to you about, as promised in this video, is the difference between the deep 00:20.990 --> 00:22.580 web and the dark web. 00:23.500 --> 00:32.410 The Deep Web is a way to reference all of the content, much of it, as you might guess, illegal or 00:32.440 --> 00:34.570 bordering on illegal. 00:35.380 --> 00:36.160 Oh, my gosh. 00:36.160 --> 00:39.130 Just all kinds of nefarious things. 00:39.670 --> 00:47.320 But the deep Web is just those Web sites that are on index, those web pages, that Web content that 00:47.320 --> 00:48.830 is not indexed. 00:48.850 --> 00:57.460 And what we mean when we say on indexed in the deep Web is we're talking about not indexed by the major 00:57.460 --> 00:59.260 players like Google. 00:59.650 --> 01:04.840 So you'll often hear people referring to this as like the Web within the Web. 01:05.500 --> 01:07.570 So that's the deep web. 01:07.840 --> 01:09.790 So what's the dark web? 01:10.120 --> 01:15.010 Well, the dark web really is a subset of the deep web. 01:15.430 --> 01:22.600 And what specifically occurs is that there is anonymous access with the dark web. 01:23.170 --> 01:34.690 So you'll have like the Tor browser, the Tor browser can establish a On-Demand VPN to hide the identity 01:34.690 --> 01:42.340 of the user as they are interacting on this on index portion of the deep web. 01:42.670 --> 01:47.920 So the dark web is all about maintaining anonymous anonymity. 01:47.980 --> 01:48.720 There we go. 01:48.730 --> 01:49.350 Big word. 01:49.360 --> 01:50.140 I went for it. 01:50.140 --> 01:50.890 I nailed it. 01:51.640 --> 01:51.900 Yeah. 01:51.910 --> 01:58.510 So you have that anonymity as you are working within the dark web and you can see why if there's a lot 01:58.510 --> 02:05.500 of things that are illegal or things that are of, you know, questionable ethics or questionable legality, 02:05.710 --> 02:12.550 well, the person's much more bravely going after that because of the fact that they are anonymous as 02:12.550 --> 02:13.270 they are doing it. 02:13.630 --> 02:23.020 Notice there's the Tor browser, there's free net genou net 12 p retro share all of these options for 02:23.290 --> 02:28.180 browsers that will be searching this dark and nefarious place. 02:28.510 --> 02:36.250 As I said, one of the ways in which the anonymity can often be granted is through a default VPN that 02:36.250 --> 02:38.620 is automatically created for users. 02:39.400 --> 02:46.870 Now search engines have their role too, for things like i0t will mention this again in the Iot section 02:46.870 --> 02:47.680 of your content. 02:47.680 --> 02:54.580 But there's things like the showdown search which is going to be carried out to find Iot devices and 02:54.580 --> 02:57.070 Sensis is a scary one. 02:57.340 --> 03:06.550 This is doing periodic scans of servers and devices out there for various organizations and providing 03:06.760 --> 03:09.460 the database of reconnaissance information. 03:09.760 --> 03:17.440 So very, very frightening that there are services like this that are consistently scanning for the 03:17.440 --> 03:23.560 servers that are making up infrastructures and reporting on their parameters. 03:24.430 --> 03:31.800 Now, keep in mind all of the other tools that could be used to reconnaissance against your organization. 03:31.810 --> 03:33.680 It is a long list. 03:33.700 --> 03:40.960 I mean, there may be organizations that have published competitive intelligence reports about your 03:40.960 --> 03:41.950 organization. 03:42.160 --> 03:46.240 So there is plenty of information for attackers to learn there. 03:46.450 --> 03:53.080 Your website itself, employment ads, you're running, press releases you're doing, your annual reports, 03:53.080 --> 03:59.710 trade journal articles, conferences where you've talked about your organization, newspaper articles. 03:59.860 --> 04:02.110 How about your patents and trademarks? 04:02.440 --> 04:09.910 It's a long, long list of information that often can be used to surveil you. 04:10.090 --> 04:14.020 And let's not talk about social engineering your employees. 04:14.260 --> 04:22.180 This is very commonly going to be done, and it's done when these individuals have already obtained 04:22.180 --> 04:29.140 a ton of information about the organization so they can be very efficient and effective in spearphishing 04:29.140 --> 04:30.190 types of attacks. 04:30.520 --> 04:37.060 As you might guess, we'll be dedicating an entire section of this course to social engineering. 04:37.090 --> 04:40.330 Of course, product catalogs may exist. 04:40.630 --> 04:45.940 Analyst reports, regulatory reports, customer vendor interviews. 04:46.300 --> 04:48.730 Sorry about the misspelling of customer. 04:49.390 --> 04:49.930 Yikes. 04:50.200 --> 04:50.890 Agents. 04:50.890 --> 04:51.730 Distributors. 04:51.730 --> 04:52.800 Suppliers. 04:52.810 --> 04:53.380 Yes. 04:53.590 --> 04:59.800 All of these can be used to help surveil your organization. 05:00.010 --> 05:08.530 We always want to be keeping tabs on exactly what we are sharing about our entity and why and where. 05:08.920 --> 05:10.000 Thanks so much for watching.