CERT-MU Computer Emergency Response Team of Mauritius Mrs. Selvana - - PowerPoint PPT Presentation
The Future of the Darknet CERT-MU Computer Emergency Response Team of Mauritius Mrs. Selvana Naiken Gopalla Information Security Consultant Agenda CERT-MU Introduction to the Darknet Darknet Markets The Darknets Future Challenges of the
Computer Emergency Response Team of Mauritius
Information Security Consultant
Introduction to the Darknet Darknet Markets The Darknet’s Future Challenges of the Darknet The Darknet and Law Enforcement CERT-MU’s contribution in combatting Cybercrime Final Notes
2
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
3
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
Darknet
authorization, often using non-standard communications protocols and ports.
Deep web
engines.
Clearnet
routinely identifying users by their IP address.
4
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
5
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
Clearnet 0.03% Deep Web 99.97% Darknet only
part of Deep Web
6
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
7
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
Stands for "The Onion Router" Anonymous internet proxy Wraps messages in encrypted layers Web addresses not like typical URLs Directories, wikis, free links
8
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
9
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
Commercial website via darknets Black markets selling illicit good as well as legal products First pioneering marketplace – Silk Road (Ross Ulbricht, Feb 2011) Payments made in cryptocurrencies Peer-to-peer, no need for cash or intermediary
10
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
11
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
Crypto currencies such as Bitcoin Person to person money transfer Transactions verified on public ledgers Bitcoin Tumbling to maintain anonymity
12
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
Initially, bitcoin perceived as Darknet money Countries like India and China tightened existing regulations People moving away from traditional forms of money and assets Decentralised nature - Prevents authority from seizing user funds Bitcoin more efficient version of gold as of now
13
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
The Darknet will become even darker Competition amongst cryptocurrencies Increase in Darknet consumption Expansion of the Darknet marketplace Emergence of private delivery services A new Avatar for the Darknet
14
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
Difficult to trace Darknet operators Growing markets for hacking programs Hiding identities of those involved in Bitcoin transactions Tax evasion and limitations on imports and exports
15
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
Data gathering, research, public education together with policymaker Understand the conditions that give rise to the Darknet Understand how Darknet markets
Rather than eradication, focus on bad actors and bad patterns Broader strategy including prevention, detection, and response Harmonize criminal laws and improve investigation and cooperation
16
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
What monitoring tools are needed to get a thorough picture of the Darknet markets in the wider international community? What monitoring tools are needed to facilitate an efficient exchange of information for policy making? How can existing tools and mechanisms (by law enforcement and others) be leveraged? Which learnings and experiences from tackling other criminal activities online, are the most pertinent and are replicable? What can be done specifically to monitor the Darknet markets?
17
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
How could prevention strategies be effective for the online environment? Should such prevention strategies be split according to target groups? What legal framework at national and International level, is required for effectively investigating and combating illicit darknet markets? What technical tools are needed to increase the effectiveness and impact of investigations (software applications, investigation techniques, etc.)? What is the role and responsibility of the stakeholders (industry, public authorities, civil society) in tracking Darknet markets on the internet? How can we best reach the different stakeholders?
18
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
Knowing the dangers Who, why, how Target and perpetrators How much harm Better response to cybercrime Public and private partnership Shared responsibility Partnerships to share information and combine efforts Partnership with
enforcement agencies Aiming on prevention Prevention better than cure Preventive measures easy to implement Users should avoid becoming victims Govt and industry more proactive Effective criminal justice framework Technology evolving rapidly Rapid and continuous enactment of laws Maintain safe and secure cyberspace
19
www.cert-mu.org.mu | Hotline: 800 2378 | Email: contact@cert.ncb.mu | Incident Reporting: incident@cert.ncb.mu
CERT-MU
Develop a globally strategic overview of the threats presented by the Darknet Coordination of global action to destabilise Darknet marketplaces Investigators should have the knowledge, expertise and tools
20
CERT-MU
Computer Emergency Response Team of Mauritius (CERT-MU) Tel: 210 55 20 | Hotline: 800 2378 General Enquiry: contact@cert.ncb.mu Subscribe to Mail List: subscribe@cert.ncb.mu Incident Reporting: incident@cert.ncb.mu Vulnerability Reporting: vulnerability@cert.ncb.mu Cybersecurity Portal: http://cybersecurity.ncb.mu Website: www.cert-mu.org.mu