Demystifying the Darknet Through the Lens of TOR: Part 1 of 2

Abstract: This talk will explain the Darknet through its most popular example: The Onion Router (TOR). With TOR, you can interact with an endpoint that is or isn’t on TOR (e.g., google.com). This talk will focus on the latter. Attendees will leave with a visceral sense of how a central aspect of TOR works.

More info: https://medium.com/@nwokedi/demystifying-the-darknet-part-i-c62a6f5d4205#.pu2srr93o

Talk duration: 13 minutes
Venue: WaffleJS
Date: March 2, 2016

Transcript

1. Demystifying the Darknet Through the Lens of TOR: Part 1 of 2 Nwokedi Idika, Ph.D. Senior Research Scientist Shape Security WaffleJS March 2, 2016
2. Why Learn About the Darknet?
3. It’s What The Cool Kids Are Doing Darknet Internet Late Adopters Early Adopters (i.e., “the Cool Kids”)
4. But it Won’t be Just for Cool Kids for Long Darknet
5. What is the Darknet?
6. Anonymous Overlay Network
7. What is TOR?
8. The Onion Router The Most Popular Example of a Darknet
9. The Most Popular Example of a Darknet Directly connecting users The Tor Project − https://metrics.torproject.org/ 0 1000000 2000000 3000000 4000000 5000000 2012 2013 2014 2015 2016
10. The Most Popular Example of a Darknet Directly connecting users The Tor Project − https://metrics.torproject.org/ 0 1000000 2000000 3000000 4000000 5000000 2012 2013 2014 2015 2016 Mevade Botnet
11. A TOR Client can Communicate with… TOR Network OR TOR Network
12. A TOR Client can Communicate with… TOR Network OR TOR Network destination host
13. A TOR Client can Communicate with… TOR Network OR TOR Network destination host destination host
14. A TOR Client can Communicate with… TOR Network OR TOR Network destination host destination host Tonight’s Focus
15. Explanation Through Situation
16. Alice & Bob Then
17. Alice & Bob Then Alice & Bob Now
18. Alice & Bob Then Alice & Bob Now “If I have to demonstrate one more <expletive> protocol…” ~Alice
19. Eddie’s Back! Eddie Murphy “Snail mail me recommendations for who should do the score for my new movie!”
20. Adele Wants In, But… “I’ll look Bloody lame recommending myself!” Who Will She Get Help from?
21. Drake
22. Drake But who will message Drake?
23. Charlie Murphy
24. Charlie Murphy But who will message Charlie?
25. Beyonce
26. Beyonce Adele is Cool with messaging Beyonce Directly
27. Keys and Lockboxes Adele Shares distinct lockbox keys with Beyonce, Charlie, and Drake
28. Adele Crafts the Letter No return address
29. Adele Preps Drake’s Package
30. Adele Preps Charlie’s Package
31. Adele Preps Beyonce’s Package return address
32. Adele Sends Beyonce’s Package to The Postal Office
33. Beyonce Gets Her Package
34. Beyonce Opens Her Package
35. Beyonce Preps A Package for Charlie
36. Charlie Gets His Package
37. Charlie Opens His Package
38. Charlie Preps A Package for Drake
39. Drake Gets His Package
40. Drake Opens His Package
41. Drake Preps Letter For Eddie
42. Eddie Gets His Letter Eddie loves Drake’s recommendation and puts Adele at the top of his list!
43. Aside from Adele, Nobody knows the ultimate source AND the ultimate destination
44. Adele IS Anonymous Aside from Adele, Nobody knows the ultimate source AND the ultimate destination
45. Let’s See Why Guess What? You Already Know Quite a Bit About TOR
46. The Reality
47. The Reality TOR Client
48. The Reality TOR Client Triple Encrypted (AES-128) Message
49. The Reality TOR Client Triple Encrypted (AES-128) Message Internet Internet Internet Internet
50. The Reality TOR Client Triple Encrypted (AES-128) Message Internet Internet Internet Internet TOR Guard Node
51. The Reality TOR Client Triple Encrypted (AES-128) Message Internet Internet Internet Internet TOR Guard Node Double Encrypted (AES-128) Message
52. The Reality TOR Client Triple Encrypted (AES-128) Message Internet Internet Internet Internet TOR Guard Node Double Encrypted (AES-128) Message TOR Middle Node
53. The Reality TOR Client Triple Encrypted (AES-128) Message Internet Internet Internet Internet TOR Guard Node Double Encrypted (AES-128) Message TOR Middle Node Single Encrypted (AES-128) Message
54. The Reality TOR Client Triple Encrypted (AES-128) Message Internet Internet Internet Internet TOR Guard Node Double Encrypted (AES-128) Message TOR Middle Node Single Encrypted (AES-128) Message TOR Exit Node
55. The Reality TOR Client Triple Encrypted (AES-128) Message Internet Internet Internet Internet TOR Guard Node Double Encrypted (AES-128) Message TOR Middle Node Single Encrypted (AES-128) Message TOR Exit Node Cleartext Message
56. The Reality TOR Client Triple Encrypted (AES-128) Message Internet Internet Internet Internet TOR Guard Node Double Encrypted (AES-128) Message TOR Middle Node Single Encrypted (AES-128) Message TOR Exit Node Cleartext Message Service on Internet
57. You May Have Lots of Questions Now
58. You May Have Lots of Questions Now How did Adele choose the nodes she did?
59. You May Have Lots of Questions Now How did Adele choose the nodes she did? Did she really need to pick three of them?
60. You May Have Lots of Questions Now How did Adele choose the nodes she did? Did she really need to pick three of them? How did she share keys with everyone?
61. You May Have Lots of Questions Now How did Adele choose the nodes she did? Did she really need to pick three of them? How did she share keys with everyone? You not only know enough to formulate questions, but you know enough to find the answers to them too
62. Thank You Articles
 www.medium.com/@nwokedi Email nwokedi@shapesecurity.com Twitter @nwokedi