Dark web threat information acquisition method

Abstract

The invention relates to a dark web threat information acquisition method, and belongs to the technical field of Internet information. According to the method, an extensible automatic access framework with concealment and a multi-dark web crawler engine capable of bypassing an anti-crawling strategy are provided, and the method is an anti-concealment technology capable of widely obtaining dark web bridge nodes and dark web websites. The method comprises the following steps: firstly, establishing a client access dark network, and monitoring dark network interaction flow; and then, the relay node is deployed in the dark network, and the flow flowing through the relay node is monitored. And finally, utilizing a distributed crawler to collect the address of the hidden server of the dark web. According to the method, an extensible multi-service dark network access framework is provided, automatic access of multiple dark network services is achieved, information leakage can be prevented, and the dynamic nature and the distribution of dark network bridge nodes are overcome. Meanwhile, the method obtains bridge nodes as comprehensive as possible, solves the problems of distribution and high concealment of the hidden service of the dark web, and obtains the domain names of the dark web website as wide as possible.

Description

technical field [0001] The invention relates to a darknet threat information acquisition technology, and belongs to the field of Internet information technology. [0002] technical background [0003] As countries around the world have strengthened the supervision and control of the bright net, the dark net with high anonymity and invisibility is subject to a large number of illegal elements. Therefore, researching darknet space resources and monitoring them in real time is of great significance to the security of the country and society. [0004] By detecting and analyzing the current services provided by the dark web space, the distribution of hidden resources of dark web nodes and websites, etc., and monitoring the criminal transaction information in the dark web in real time, the acquisition of important military and political threat intelligence and the security of the dark web space are realized. Situational analysis. Adopt active detection and passive collection rela...

AI Technical Summary

Problems solved by technology

[0007] The purpose of the present invention is to address the defects of the existing technology, and to effectively solve the technical problem that dark network traffic cannot be accurately identified, and creatively propose a dark network threat information acquisition method

Images