The darknet's smaller than we thought: the life cycle of Tor Hidden Services

Gareth Owenson; Sarah Cortes; Andrew Lewman

doi:10.1016/j.diin.2018.09.005

The darknet's smaller than we thought: the life cycle of Tor Hidden Services

Gareth Owenson, Sarah Cortes, Andrew Lewman

School of Computing

Research output: Contribution to journal › Article › peer-review

1313 Downloads (Pure)

Abstract

The Tor Darknet is a pseudo-anonymous place to host content online frequently used by criminals to sell narcotics and to distribute illicit material. Many studies have attempted to estimate the size of the darknet, but this paper will show that previous estimates on size are inaccurate due to hidden service lifecycle. The first examination of its kind will be presented on the differences between short lived and long-lived hidden services. Finally, in light of a new Tor protocol for the darknet which will prevent the running of relays to learning darknet sites, an analysis is presented of the use of crawling and whether this is an effective mechanism to discover sites for law enforcement.

Original language	English
Pages (from-to)	17-22
Number of pages	6
Journal	Digital Investigation
Volume	27
Early online date	22 Sept 2018
DOIs	https://doi.org/10.1016/j.diin.2018.09.005
Publication status	Published - 1 Dec 2018

Access to Document

10.1016/j.diin.2018.09.005

paperAccepted author manuscript (Post-print), 240 KBLicence: CC BY-NC-ND

Cite this

@article{864849b3b8ae4feba66c98e5df9def6e,

title = "The darknet's smaller than we thought: the life cycle of Tor Hidden Services",

abstract = "The Tor Darknet is a pseudo-anonymous place to host content online frequently used by criminals to sell narcotics and to distribute illicit material. Many studies have attempted to estimate the size of the darknet, but this paper will show that previous estimates on size are inaccurate due to hidden service lifecycle. The first examination of its kind will be presented on the differences between short lived and long-lived hidden services. Finally, in light of a new Tor protocol for the darknet which will prevent the running of relays to learning darknet sites, an analysis is presented of the use of crawling and whether this is an effective mechanism to discover sites for law enforcement.",

author = "Gareth Owenson and Sarah Cortes and Andrew Lewman",

note = "12 month embargo",

year = "2018",

month = dec,

day = "1",

doi = "10.1016/j.diin.2018.09.005",

language = "English",

volume = "27",

pages = "17--22",

journal = "Digital Investigation",

issn = "1742-2876",

publisher = "Elsevier Limited",

}

TY - JOUR

T1 - The darknet's smaller than we thought: the life cycle of Tor Hidden Services

AU - Owenson, Gareth

AU - Cortes, Sarah

AU - Lewman, Andrew

N1 - 12 month embargo

PY - 2018/12/1

Y1 - 2018/12/1

N2 - The Tor Darknet is a pseudo-anonymous place to host content online frequently used by criminals to sell narcotics and to distribute illicit material. Many studies have attempted to estimate the size of the darknet, but this paper will show that previous estimates on size are inaccurate due to hidden service lifecycle. The first examination of its kind will be presented on the differences between short lived and long-lived hidden services. Finally, in light of a new Tor protocol for the darknet which will prevent the running of relays to learning darknet sites, an analysis is presented of the use of crawling and whether this is an effective mechanism to discover sites for law enforcement.

AB - The Tor Darknet is a pseudo-anonymous place to host content online frequently used by criminals to sell narcotics and to distribute illicit material. Many studies have attempted to estimate the size of the darknet, but this paper will show that previous estimates on size are inaccurate due to hidden service lifecycle. The first examination of its kind will be presented on the differences between short lived and long-lived hidden services. Finally, in light of a new Tor protocol for the darknet which will prevent the running of relays to learning darknet sites, an analysis is presented of the use of crawling and whether this is an effective mechanism to discover sites for law enforcement.

U2 - 10.1016/j.diin.2018.09.005

DO - 10.1016/j.diin.2018.09.005

M3 - Article

SN - 1742-2876

VL - 27

SP - 17

EP - 22

JO - Digital Investigation

JF - Digital Investigation

ER -

The darknet's smaller than we thought: the life cycle of Tor Hidden Services

Abstract

Access to Document

Fingerprint

Cite this