What are the Deep Web and Dark Web?

The term Deep and Dark Web (DDW) refers to websites that are hidden or omitted from standard web searching and crawling or require an alternative (usually encrypted and anonymized) means to access them aside from normal web browsing. Both Deep and Dark Web are often incorrectly associated as hostile spaces that only harbor illicit or illegal content. Despite the prevalence of such activity, there are legitimate and proper applications for the DDW and are attractive for organizations and users that are concerned about privacy and are simply are looking to make use of the encryption and anonymity that goes along with participating in the region of internet space known as the Deep and Dark Web.

A lot of mainstream coverage and advertising around the deep web and dark web focuses on the illicit activities that take place on underground marketplaces and forums. These include the development, distribution, and/or sale of drugs, weapons, hitmen services, pornography, counterfeit currency, personal and financial data, and malware and exploits. This is true; however, not all deep web or dark web activity is illicit, nor is all illicit activity relevant to most customers of cybersecurity and anti-virus vendors. The deep and dark web, despite the negative connotation, should be more broadly interpreted as spaces where users can exercise their right to privacy and data protection with no exception to inherent risks or abuse as with any technology or service.

While vendors of actual deep and dark web research tools and analysis services do provide value to their customers, the key for a cybersecurity vendor is to tailor collection and intelligence efforts to fit the needs of its customers. The Fidelis Elevate platform consumes threat intelligence from the Fidelis Threat Research Team (TRT) in the form of countermeasures and automated threat feeds. These countermeasures and threat feeds are the results of TRT Security Researchers and Cyber Threat Intelligence Analysts curation of intelligence information and analysis from multiple open-source, dark web, and proprietary sources. In addition, clients can utilize Fidelis’ Threat Research as a Service (TRaaS) solutions to augment the work of internal cyber threat intelligence teams.