Cybercrimes are consistently advancing in complexity. Cyber threat intelligence (CTI) is useful for analyzing, evaluating, and drawing conclusions for areas such as indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs). However, valuable CTI is not always utilized effectively, particularly from the unregulated Dark Web. Manually processing this vast and complex data is unrealistic. This research uses artificial intelligence (AI) and machine learning (ML) to provide automation and process a sizable amount of information in a reasonable time. Specifically, it will use the DUTA-10K Darknet dataset to develop ML models based on the Random Forest, Support Vector Machine, and XGBoost algorithms. These models distinguish illicit and benign addresses, along with their classes and language categories. The resulting models showed reliable performance, with XGBoost consistently producing more effective models overall for predicting illicit status and language.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Analyzing Darknet Address Information Using Machine Learning

  • Trenton Ward,
  • Cheryl Hinds,
  • Jonathan Graham

摘要

Cybercrimes are consistently advancing in complexity. Cyber threat intelligence (CTI) is useful for analyzing, evaluating, and drawing conclusions for areas such as indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs). However, valuable CTI is not always utilized effectively, particularly from the unregulated Dark Web. Manually processing this vast and complex data is unrealistic. This research uses artificial intelligence (AI) and machine learning (ML) to provide automation and process a sizable amount of information in a reasonable time. Specifically, it will use the DUTA-10K Darknet dataset to develop ML models based on the Random Forest, Support Vector Machine, and XGBoost algorithms. These models distinguish illicit and benign addresses, along with their classes and language categories. The resulting models showed reliable performance, with XGBoost consistently producing more effective models overall for predicting illicit status and language.