Yes, I know you're probably thinking this is the end list subject, but we are nearing the conclusion
of our discussion on search engines and their function in ethical hacking.
What I wanted to talk to you about, as promised in this video, is the difference between the deep
web and the dark web.
The Deep Web is a way to reference all of the content, much of it, as you might guess, illegal or
bordering on illegal.
Oh, my gosh.
Just all kinds of nefarious things.
But the deep Web is just those Web sites that are on index, those web pages, that Web content that
is not indexed.
And what we mean when we say on indexed in the deep Web is we're talking about not indexed by the major
players like Google.
So you'll often hear people referring to this as like the Web within the Web.
So that's the deep web.
So what's the dark web?
Well, the dark web really is a subset of the deep web.
And what specifically occurs is that there is anonymous access with the dark web.
So you'll have like the Tor browser, the Tor browser can establish a On-Demand VPN to hide the identity
of the user as they are interacting on this on index portion of the deep web.
So the dark web is all about maintaining anonymous anonymity.
There we go.
Big word.
I went for it.
I nailed it.
Yeah.
So you have that anonymity as you are working within the dark web and you can see why if there's a lot
of things that are illegal or things that are of, you know, questionable ethics or questionable legality,
well, the person's much more bravely going after that because of the fact that they are anonymous as
they are doing it.
Notice there's the Tor browser, there's free net genou net 12 p retro share all of these options for
browsers that will be searching this dark and nefarious place.
As I said, one of the ways in which the anonymity can often be granted is through a default VPN that
is automatically created for users.
Now search engines have their role too, for things like i0t will mention this again in the Iot section
of your content.
But there's things like the showdown search which is going to be carried out to find Iot devices and
Sensis is a scary one.
This is doing periodic scans of servers and devices out there for various organizations and providing
the database of reconnaissance information.
So very, very frightening that there are services like this that are consistently scanning for the
servers that are making up infrastructures and reporting on their parameters.
Now, keep in mind all of the other tools that could be used to reconnaissance against your organization.
It is a long list.
I mean, there may be organizations that have published competitive intelligence reports about your
organization.
So there is plenty of information for attackers to learn there.
Your website itself, employment ads, you're running, press releases you're doing, your annual reports,
trade journal articles, conferences where you've talked about your organization, newspaper articles.
How about your patents and trademarks?
It's a long, long list of information that often can be used to surveil you.
And let's not talk about social engineering your employees.
This is very commonly going to be done, and it's done when these individuals have already obtained
a ton of information about the organization so they can be very efficient and effective in spearphishing
types of attacks.
As you might guess, we'll be dedicating an entire section of this course to social engineering.
Of course, product catalogs may exist.
Analyst reports, regulatory reports, customer vendor interviews.
Sorry about the misspelling of customer.
Yikes.
Agents.
Distributors.
Suppliers.
Yes.
All of these can be used to help surveil your organization.
We always want to be keeping tabs on exactly what we are sharing about our entity and why and where.
Thanks so much for watching.