DOCSLIB.ORG

Application Supporting Re-Decentralization of the Web: Photo Manager Student: Bc

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Application Supporting Re-Decentralization of the Web: Photo Manager Student: Bc ASSIGNMENT OF MASTER’S THESIS Title: Application supporting re-decentralization of the Web: Photo manager Student: Bc. Karel Dvořák Supervisor: RNDr. Jakub Klímek, Ph.D. Study Programme: Informatics Study Branch: Web and Software Engineering Department: Department of Software Engineering Validity: Until the end of summer semester 2019/20 Instructions A lot of data on the current Web is stored in a centralized way, e.g. at Facebook or Google. However, the Web was originally meant to be decentralized. The current trend in Web research is therefore re-decentralization of the Web using state of the art Web technologies. - Acquaint yourself with the Linked Data principles [1], the RDF data model [2], the recent W3C Social Web recommendations and the Solid framework [4]. - Based on the survey, evaluate technologies and protocols supporting the re-decentralization of the Web. - Design, implement, test and evaluate a Solid based application supporting uploading and viewing images, which will include user authentication using WebID-TLS [5] and WebID-OIDC [6]. - Publish the project as open-source, hosted on a public repository. References [1] Linked Data, W3C, https://www.w3.org/standards/semanticweb/data [2] RDF, W3C, https://www.w3.org/TR/rdf11-concepts/ [3] Social Web Working Group, W3C, https://www.w3.org/wiki/Socialwg [4] The Solid Project, MIT, https://solid.mit.edu/ [5] WebID-TLS, W3C, https://dvcs.w3.org/hg/WebID/raw-file/tip/spec/tls-respec.html [6] WebID-OIDC, https://github.com/solid/webid-oidc-spec Ing. Michal Valenta, Ph.D. doc. RNDr. Ing. Marcel Jiřina, Ph.D. Head of Department Dean Prague November 28, 2018 Master’s thesis Application supporting re-decentralization of the Web: Photo manager Bc. Karel Dvořák Department of Software Engineering Supervisor: RNDr. Jakub Klímek, Ph.D. May 6, 2019 Acknowledgements I would like to thank my supervisor RNDr. Jakub Klímek, Ph.D. for his willingness, valuable advice, and mentoring provided throughout writing this thesis. I would also like to thank my family and friends for their support and help. Declaration I hereby declare that the presented thesis is my own work and that I have cited all sources of information in accordance with the Guideline for adhering to ethical principles when elaborating an academic final thesis. I acknowledge that my thesis is subject to the rights and obligations stip- ulated by the Act No. 121/2000 Coll., the Copyright Act, as amended. In accordance with Article 46(6) of the Act, I hereby grant a nonexclusive au- thorization (license) to utilize this thesis, including any and all computer pro- grams incorporated therein or attached thereto and all corresponding docu- mentation (hereinafter collectively referred to as the “Work”), to any and all persons that wish to utilize the Work. Such persons are entitled to use the Work in any way (including for-profit purposes) that does not detract from its value. This authorization is not limited in terms of time, location and quan- tity. However, all persons that makes use of the above license shall be obliged to grant a license at least in the same scope as defined above with respect to each and every work that is created (wholly or in part) based on the Work, by modifying the Work, by combining the Work with another work, by including the Work in a collection of works or by adapting the Work (including trans- lation), and at the same time make available the source code of such work at least in a way and scope that are comparable to the way and scope in which the source code of the Work is made available. In Prague on May 6, 2019 . Czech Technical University in Prague Faculty of Information Technology © 2019 Karel Dvořák. All rights reserved. This thesis is school work as defined by Copyright Act of the Czech Republic. It has been submitted at Czech Technical University in Prague, Faculty of Information Technology. The thesis is protected by the Copyright Act and its usage without author’s permission is prohibited (with exceptions defined by the Copyright Act). Citation of this thesis Dvořák, Karel. Application supporting re-decentralization of the Web: Photo manager. Master’s thesis. Czech Technical University in Prague, Faculty of Information Technology, 2019. Abstrakt Tato práce pojednává o návrhu a implementaci aplikace podporující re-decen- tralizaci Webu, která spolupracuje s technologií Solid. Na základě požadavků a výsledků analýzy je navržena aplikace zaměřena na správu fotografií. V práci je uvedena analýza, návrh, realizace, testování, a nasazení aplikace, společně se zpětnou vazbou komunity. Výstupem implementační části je webová aplikace umožňující správu fotografií na frameworku Solid. Klíčová slova Solid, propojená data, decentralizace, manažer fotografií Abstract This thesis deals with analysis and implementation of an application support- ing re-decentralization of the Web, which utilizes the Solid technology. The application focused on photo management is designed based on the require- ments and analysis. The thesis contains analysis, design, realization, testing, and deployment of the application, along with the feedback from the commu- nity. The output of the implementation part is the Web application supporting management of pictures on the Solid framework. Keywords Solid, linked data, decentralization, photo manager vii Contents Introduction 1 1 State-of-the-art 5 1.1 Available Decentralization Solutions . 5 1.2 Solid Framework . 11 1.3 Linked Data . 16 1.4 RDF . 21 1.5 WebID . 31 1.6 Current Photo Managing Applications Built on Solid . 35 2 Analysis 37 2.1 Product Statement . 37 2.2 Business Requirements . 37 2.3 Requirements Definition . 38 2.4 Use Cases Definition . 40 2.5 Scenarios Definition . 41 2.6 Domain Model . 46 3 Design 49 3.1 User Interface Design . 49 3.2 Solid Framework Libraries Description . 64 3.3 Access Lists . 68 3.4 Class Diagram . 70 4 Realization 73 4.1 Used Technologies . 73 4.2 Application’s Structure . 74 4.3 Implementation Focuses . 74 4.4 Final Version of the Pixolid Application . 91 ix 5 Testing 101 5.1 Testing Scenarios . 101 5.2 Automated Testing . 106 6 Release and Feedback 107 6.1 Release . 107 6.2 Deployment . 107 6.3 Feedback . 108 Conclusion 111 Bibliography 113 A Acronyms 117 B Developer Guide 121 B.1 Installation . 121 B.2 Running the Development Mode . 122 B.3 Running Tests . 122 C Administrator Guide 123 C.1 Installation . 123 C.2 Building the Application . 124 C.3 Deploying the Application . 124 D User Guide 127 D.1 Functionality . 127 D.2 Start Using Pixolid . 127 D.3 Individual Screens’ Description . 128 E Contents of enclosed CD 135 x List of Figures 1.1 Network types . 6 1.2 Solid POD server . 15 1.3 The LOD Cloud . 17 1.4 The RDF Triple . 22 1.5 Example: Spider-man vs. Green Goblin . 24 1.6 Timeline . 36 2.1 Use Case Diagram . 42 2.2 Domain Model . 47 3.1 Task Graph . 52 3.2 WF1 Login Provider . 54 3.3 WF2 Login WebID . 54 3.4 WF3 Login Provider Redirect . 55 3.5 WF4 Application Folder Selection . 55 3.6 WF5 Friends Images Screen . 56 3.7 WF6 Tab Bar Logout . 56 3.8 WF7 Upload Image Screen . 57 3.9 WF8 Image Selection for Upload . 57 3.10 WF9 Image Selected for Upload . 58 3.11 WF10 Private Sharing Toggled . 58 3.12 WF11 Private Sharing Friends Selection . 59 3.13 WF12 Private Sharing Friends Selected . 59 3.14 WF13 Users’ Images . 60 3.15 WF14 Image Detail . 60 3.16 WF15 Comment Typing . 61 3.17 WF16 Comment Adding . 61 3.18 WF17 Giving a Like . 62 3.19 WF18 User Profile . 62 3.20 WF19 Application Folder Change . 63 xi 3.21 WF20 Application Folder Input . 63 3.22 Pixolid Logo . 65 3.23 Pixolid Black and White Logo . 65 3.24 Pixolid Favicon . 65 3.25 Class Diagram . 71 4.1 Pixolid’s directory structure . 75 4.2 Login Provider . 91 4.3 Login WebID . 92 4.4 Login Provider Redirect . 92 4.5 Application Folder Selection . 93 4.6 Friends Images Screen . 93 4.7 Tab Bar Logout . 94 4.8 Upload Image Screen . 94 4.9 Image Selection for Upload . 95 4.10 Image Selected for Upload . 95 4.11 Private Sharing Toggled . 96 4.12 Private Sharing Friends Selection . 96 4.13 Private Sharing Friends Selected . 97 4.14 Users’ Images . 97 4.15 Image Detail . 98 4.16 Comment Typing . 98 4.17 Comment Adding . 99 4.18 Giving a Like . 99 4.19 User Profile . 100 4.20 Application Folder Change . 100 C.1 Deployment Diagram . 125 D.1 Login Screen . 128 D.2 Application Folder Selection . 129 D.3 Upload Image . 130 D.4 Friend’s Images . 131 D.5 User’s Images . ..
Load more

Recommended publications
  • PDF FACULTAD DE BELLAS ARTES Archivo Digital: Descarga Y Online ISBN 978-950-34-1541-2 Decana Secretaria De 1
    1º Encuentro de las cátedras de Lenguaje Visual 2B, Patrimonio Cultural e Historia de las Artes Visuales IX 1º Encuentro de las cátedras de Lenguaje Visual 2B, Patrimonio Cultural e Historia de las Artes Visuales IX 1º Encuentro de las cátedras de Lenguaje Visual 2B, Patrimonio Cultural e Historia de las Artes Visuales IX Diciembre de 2016 Visualidades contemporáneas: patrimonio, exposiciones y dispositivos / Mariel Ciafardo... [et al.]. - 1a ed. - La Plata : Universidad Nacional de La Plata. Facultad de Bellas Artes, 2017. Libro digital, PDF FACULTAD DE BELLAS ARTES Archivo Digital: descarga y online ISBN 978-950-34-1541-2 Decana Secretaria de 1. Patrimonio. 2. Historia del Arte. I. Ciafardo, Mariel Prof. Mariel Ciafardo Publicaciones y Posgrado CDD 709 Prof. María Elena Larrègle Vicedecana Prof. Cristina Terzaghi Secretaria de Extensión Prof. María Victoria Mc Coubrey Secretaria de Decanato Prof. Paula Sigismondo Secretario de Relaciones Institucionales Secretaria de Asuntos Académicos DI Eduardo Pascal Prof. Santiago Romé Secretario de Cultura Jefa del Departamento Lic. Carlos Coppa de Estudios Históricos y Sociales Lic. Paola Sabrina Belén Secretario de Producción y Comunicación Secretario de Planificación, Prof. Martín Barrios Infraestructura y Finanzas DCV Juan Pablo Fernández Secretario de Asuntos Estudiantiles Prof. Esteban Conde Ferreira Secretaria de Ciencia y Técnica Lic. Silvia García Secretario de Programas Externos DCV Fermín González Laría COMITÉ ORGANIZADOR Lic. Liliana Conles Prof. Sergio Moyinedo Prof. Mariel Ciafardo Lic. Paola Sabrina Belén Lic. Natalia Giglietti Mg. Francisco Lemus Diseño Prof. Marina Panfili DCV Diego R. Ibañez Roka Edición de contenido Lic. Natalia Giglietti Mg. Francisco Lemus Obra de tapa Cristina Schiavi, Nocturno, 2013, acrílico sobre mdf, 135 x 135 cm, Colección Malba-Fundación Costantini.
    [Show full text]
  • A Framework for Identifying Host-Based Artifacts in Dark Web Investigations
    Dakota State University Beadle Scholar Masters Theses & Doctoral Dissertations Fall 11-2020 A Framework for Identifying Host-based Artifacts in Dark Web Investigations Arica Kulm Dakota State University Follow this and additional works at: https://scholar.dsu.edu/theses Part of the Databases and Information Systems Commons, Information Security Commons, and the Systems Architecture Commons Recommended Citation Kulm, Arica, "A Framework for Identifying Host-based Artifacts in Dark Web Investigations" (2020). Masters Theses & Doctoral Dissertations. 357. https://scholar.dsu.edu/theses/357 This Dissertation is brought to you for free and open access by Beadle Scholar. It has been accepted for inclusion in Masters Theses & Doctoral Dissertations by an authorized administrator of Beadle Scholar. For more information, please contact [email protected]. A FRAMEWORK FOR IDENTIFYING HOST-BASED ARTIFACTS IN DARK WEB INVESTIGATIONS A dissertation submitted to Dakota State University in partial fulfillment of the requirements for the degree of Doctor of Philosophy in Cyber Defense November 2020 By Arica Kulm Dissertation Committee: Dr. Ashley Podhradsky Dr. Kevin Streff Dr. Omar El-Gayar Cynthia Hetherington Trevor Jones ii DISSERTATION APPROVAL FORM This dissertation is approved as a credible and independent investigation by a candidate for the Doctor of Philosophy in Cyber Defense degree and is acceptable for meeting the dissertation requirements for this degree. Acceptance of this dissertation does not imply that the conclusions reached by the candidate are necessarily the conclusions of the major department or university. Student Name: Arica Kulm Dissertation Title: A Framework for Identifying Host-based Artifacts in Dark Web Investigations Dissertation Chair: Date: 11/12/20 Committee member: Date: 11/12/2020 Committee member: Date: Committee member: Date: Committee member: Date: iii ACKNOWLEDGMENT First, I would like to thank Dr.
    [Show full text]
  • Zeronet Presentation
    ZeroNet Decentralized web platform using Bitcoin cryptography and BitTorrent network. ABOUT ZERONET Why? Current features We believe in open, free, and ◦ Real-time updated sites uncensored network and communication. ◦ Namecoin .bit domain support ◦ No hosting costs ◦ Multi-user sites Sites are served by visitors. ◦ Password less, Bitcoin's BIP32- ◦ Impossible to shut down based authorization It's nowhere because it's ◦ Built-in SQL server with P2P data everywhere. synchronization ◦ No single point of failure ◦ Tor network support Site remains online so long as at least 1 peer serving it. ◦ Works in any browser/OS ◦ Fast and works offline You can access the site even if your internet is unavailable. HOW DOES IT WORK? THE BASICS OF ASYMMETRIC CRYPTOGRAPHY When you create a new site you get two keys: Private key Public key 5JNiiGspzqt8sC8FM54FMr53U9XvLVh8Waz6YYDK69gG6hso9xu 16YsjZK9nweXyy3vNQQPKT8tfjCNjEX9JM ◦ Only you have it ◦ This is your site address ◦ Allows you to sign new content for ◦ Using this anyone can verify if the your site. file is created by the site owner. ◦ No central registry ◦ Every downloaded file is verified, It never leaves your computer. makes it safe from malicious code inserts or any modifications. ◦ Impossible to modify your site without it. MORE INFO ABOUT CRYPTOGRAPHY OF ZERONET ◦ ZeroNet uses the same elliptic curve based encryption as in your Bitcoin wallet. ◦ You can accept payments directly to your site address. ◦ Using the current fastest supercomputer, it would take around 1 billion years to "hack" a private key. WHAT HAPPENS WHEN YOU VISIT A ZERONET SITE? WHAT HAPPENS WHEN YOU VISIT A ZERONET SITE? (1/2) 1 Gathering visitors IP addresses: Please send some IP addresses for site 1EU1tbG9oC1A8jz2ouVwGZyQ5asrNsE4Vr OK, Here are some: 12.34.56.78:13433, 42.42.42.42:13411, ..
    [Show full text]
  • The Book of Swarm Storage and Communication Infrastructure for Self-Sovereign Digital Society Back-End Stack for the Decentralised Web
    the book of Swarm storage and communication infrastructure for self-sovereign digital society back-end stack for the decentralised web Viktor Trón v1.0 pre-release 7 - worked on November 17, 2020 the swarm is headed toward us Satoshi Nakamoto ii CONTENTS Prolegomena xi Acknowledgments xii i prelude 1 the evolution2 1.1 Historical context 2 1.1.1 Web 1.02 1.1.2 Web 2.03 1.1.3 Peer-to-peer networks 6 1.1.4 The economics of BitTorrent and its limits 7 1.1.5 Towards Web 3.08 1.2 Fair data economy 12 1.2.1 The current state of the data economy 12 1.2.2 The current state and issues of data sovereignty 13 1.2.3 Towards self-sovereign data 15 1.2.4 Artificial intelligence and self-sovereign data 16 1.2.5 Collective information 17 1.3 The vision 18 1.3.1 Values 18 1.3.2 Design principles 19 1.3.3 Objectives 19 1.3.4 Impact areas 20 1.3.5 The future 21 ii design and architecture 2 network 25 2.1 Topology and routing 25 2.1.1 Requirements for underlay network 25 2.1.2 Overlay addressing 26 2.1.3 Kademlia routing 27 2.1.4 Bootstrapping and maintaining Kademlia topology 32 2.2 Swarm storage 35 2.2.1 Distributed immutable store for chunks 35 2.2.2 Content addressed chunks 38 2.2.3 Single-owner chunks 41 2.2.4 Chunk encryption 42 2.2.5 Redundancy by replication 43 2.3 Push and pull: chunk retrieval and syncing 47 iii 2.3.1 Retrieval 47 2.3.2 Push syncing 51 2.3.3 Pull syncing 53 2.3.4 Light nodes 55 3 incentives 57 3.1 Sharing bandwidth 58 3.1.1 Incentives for serving and relaying 58 3.1.2 Pricing protocol for chunk retrieval 59 3.1.3 Incentivising push-syncing
    [Show full text]
  • Zeronet Browser Bundle
    IJSRD - International Journal for Scientific Research & Development| Vol. 5, Issue 03, 2017 | ISSN (online): 2321-0613 ZeroNet Browser Bundle Amol Kulkarni1 Abhishek Bagde2 Bhagyesh Dhatrak3 Akshay Tiwari4 Saguna Ingle5 1,2,3,4,5Department of Computer Engineering 1,2,3,4,5Ramrao Adik Institute of Technology, Nerul, India Abstract— The Internet is the global system of interconnected computer network that links billions of devices worldwide. It III. OBJECTIVE OF THE STUDY is a network of networks that consist of millions of private, Following are the objectives that were considered during the public academic business and government network of local development of this project: and global scope, linked by a broad array of electronics Easy access of a free peer to peer network. wireless and optical networking technologies. ZeroNet is a Reducing configuration steps for accessing ZeroNet. new emerging overlay network that could provide alternative to the existing centralized system. ZeroNet provides open free Making ZeroNet available to majority of the masses. and uncensored service using bitcoin cryptography and BitTorrent network. In ZeroNet content is distributed directly IV. PROPOSED METHODOLOGY to other visitor without any central server. It is decentralized From analysis we can say that current browsers do not satisfy web platform using Bitcoin cryptography and BitTorrent the exact requirement of access to ZeroNet sites. Also, it network. Currently while using ZeroNet protocol through solely depends on the active user to Configure their browser. existing browser user has to go through long and tedious Our proposed ZeroNet Browser overcomes these limitations process which could discourage a user to opt for ZeroNet in of content based filtering such as the ability to provide day to day use.
    [Show full text]
  • Unveiling the I2P Web Structure: a Connectivity Analysis
    Unveiling the I2P web structure: a connectivity analysis Roberto Magan-Carri´ on,´ Alberto Abellan-Galera,´ Gabriel Macia-Fern´ andez´ and Pedro Garc´ıa-Teodoro Network Engineering & Security Group Dpt. of Signal Theory, Telematics and Communications - CITIC University of Granada - Spain Email: [email protected], [email protected], [email protected], [email protected] Abstract—Web is a primary and essential service to share the literature have analyzed the content and services offered information among users and organizations at present all over through this kind of technologies [6], [7], [2], as well as the world. Despite the current significance of such a kind of other relevant aspects like site popularity [8], topology and traffic on the Internet, the so-called Surface Web traffic has been estimated in just about 5% of the total. The rest of the dimensions [9], or classifying network traffic and darknet volume of this type of traffic corresponds to the portion of applications [10], [11], [12], [13], [14]. Web known as Deep Web. These contents are not accessible Two of the most popular darknets at present are The Onion by search engines because they are authentication protected Router (TOR; https://www.torproject.org/) and The Invisible contents or pages that are only reachable through the well Internet Project (I2P;https://geti2p.net/en/). This paper is fo- known as darknets. To browse through darknets websites special authorization or specific software and configurations are needed. cused on exploring and investigating the contents and structure Despite TOR is the most used darknet nowadays, there are of the websites in I2P, the so-called eepsites.
    [Show full text]
  • P2P-Hate-Report.Pdf
    I’m in a community called Scuttlebutt which uses Peer-to-Peer technology. This is a type of ​ ​ technology that works radically differently from the internet as we know it now and offers a powerful vision for a resilient and sustainable future for technology and social movements. One evening, a friend who is a developer on Scuttlebutt and also has marginalized identities like myself messaged me and a small group of others with great concern writing: “Ok - so we have nazis already using scuttlebutt. When the NZ shootings happened I had a dream that in the news it was announced that they had been using an enclave of scuttlebutt to organise and radicalise. It seems inevitable that this will happen…” It continued a long conversation about the risks created by these radical technologies. My friend was genuinely afraid. So was I. And I still am. Like so many others, he had put a ton of work into cultivating both the community and the technology. He was scared both that the product of so many people’s love would become a central aid in white-supremacist organizing and that the community wasn’t ready to deal with the fall out of such a “nightmarish vision.” In most Peer-to-Peer communities it is impossible to surveill them or know how many people are using them because they are secure and often private by design. The only way to even catch a glimpse of how many white supremacists are using them is when they post on leaked forums or public websites. Otherwise, unless their conversations are infiltrated, we can only see the tips of the iceberg of the violence (or good!) facilitated by these technologies.
    [Show full text]
  • ZERONET: an OVERVIEW M.Pavithra1, S.Vasanth2, R
    International Journal of Pure and Applied Mathematics Volume 119 No. 14 2018, 1347-1351 ISSN: 1314-3395 (on-line version) url: http://www.ijpam.eu Special Issue ijpam.eu ZERONET: AN OVERVIEW M.Pavithra1, S.Vasanth2, R.Rajmohan3, D.Jayakumar4 1,2Departmentof CSE, PEC, Pondicherry, India 3,4Department of CSE, IFET, Villupuram, India ABSTRACT— Internet is the basic need in todays life. anywhere virtually but actually the data is nowhere. Sharing of data’s resources files among different group Python based software called zeronet can be used to of user is possible because of the emerging growth of achieve the virtuality. The network does not rely on internet. Once the internet is only for the group of centralized resources instead of that each user will people works within an organization i.e. it is a maintain their own data the authority of the data must standalone network may or may not connected to the depend on the individual user who rely on the network. network. Later everything moved towards a centralized It makes an user interface decentralized instead of network. Every user in the network will rely on the network. The zeronet is said to be an decentralized web central authority the authority must responsible to browser and it is an open source python based software manage maintain and update the user request. And most here the user can create their own site without much importantly the centralized network is established on effort and they will be able to maintain it. They will act the client server exemplary, if particular site can be as an owner for their own data every other user will able requested by an end user the request can be sent to the to access the data but no one will change the data.
    [Show full text]
  • NSIGHT SERIES May 2020 — Issue 5
    NSIGHT SERIES May 2020 — Issue 5 The Decline of the Dark Web How Mobile Solutions have Disrupted the Dark Web The dark web is in decline. Once the preferred means for anonymizing users’ online activity, the dark web has now been supplanted by encrypted mobile applications and alternate solutions. Similarly, aggressive law enforcement actions have shuttered many of the dark web’s largest forums, making it a much more fleeting and much less secure destination for criminal activity. As a result, the number of users accessing dark web sites has dropped. Instead, many users are connecting through the dark web via mobile applications on Android and iOS, rather than to the dark web via standard browsers, to obfuscate their internet traffic. Indeed, the number of users accessing the Tor network has increased, even as the number of users accessing hidden Dark web platforms such as The Onion Router (Tor), I2P, service sites—the “dark” part of the dark web—has dropped. Freenet, and Zeronet, attempt to anonymize users’ digital Moreover, encrypted applications like Telegram, Signal, fingerprint so that technical attributes like IP addresses are and Wickr.me have lowered the barrier to entry for secure not easily available to entities with intent to track users’ communication and illicit transactions. As a result, just like online activity. This emphasis on anonymity was designed to many other industries, the dark web has been disrupted keep the dark web free from oversight, free from censorship, by technological innovation and aggressive competition, and open to anyone in any location. The developers of Tor, triggering a gradual decline and turning the so-called the most popular dark web platform, promote it as a tool invisible internet even more opaque.
    [Show full text]
  • E-Brief // Jan 31 2019
    CONFIDENTIAL E-BRIEF // JAN 31 2019 Intelligence vs Data 2 China Hacked HPE, IBM And Then Attacked Clients 3 Pro-ISIS Media Organization Testing the “ZeroNet” Decentralized Peer-to-Peer Network 5 Cyber Criminals Likely Obfuscate Exploitation through Web Browser Extensions, Increasing Ability to Distribute Malware to End Users 7 Anonymous-Related Individuals Create Virtual World for Online Communication and Commerce 9 DC Schools Launch New Panic Button App to Alert First Responders in Crisis Situations 11 Homeland Security Program to Work on Correcting the Vulnerabilities with GPS 11 Ryuk Ransomware Affects Systems at US Industrial Supply Company 11 North Korea-Linked Hackers Target Academic Institutions 12 B&Q Data Leak Exposes Information On 70,000 Thefts From Its Stores, Including Names of Suspected Offenders 13 Global Hacking Campaign Takes Aim at Finance, Defense, and Energy Companies 15 Fighting Deepfakes Will Require More than Technology 16 Apple Launches New Transparency Report Website Showing Government Data Requests from around the World 16 Microsoft’s Search Engine Bing Shows Child Pornography, Report Finds 17 Amazon Sent 1,700 Audio Recordings of Alexa User to a Stranger 18 Russian Influence Actors Attempted to Amplify “Yellow Vest” Protest, Spread of Movement to US States 18 Hackers Target Organizations in the Naval and Maritime Sectors 20 Potential Use of ‘Mastodon Social’ as Twitter Alternative 21 Hackers are Spreading Islamic State Propaganda by Hijacking Dormant Twitter Accounts 23 Forget Bitcoin Why Criminals Are Using Fortnite to Launder Illicit Funds 24 Decrypted Telegram Bot Chatter Revealed as New Windows Malware 25 CONFIDENTIAL CONFIDENTIAL Intelligence vs Data What is Intelligence? Data is not information, information is not intelligence.
    [Show full text]
  • The Darknet Index: U.S
    The Darknet Index: U.S. Government Edition Ranking U.S. government agencies using darknet intelligence Introduction One measure of cybersecurity risk involves assessing how much data is available on the darknet about a company or organization that can be misused by hackers or criminals. A greater availability of data implies a higher risk profile, as more attack vectors are available for use against the organization. TABLE OF CONTENTS OWL Cybersecurity recently reranked the companies of the Fortune 1 500 based on their darknet footprints . We then ranked the largest Introduction ...............................1 2 commercial entities in Germany . Methodology................................3 The Top 10 ...................................5 In this report, we address how prominent U.S. government agencies, Conclusions..................................8 departments, and the U.S. military fare on the darknet as compared The Darknet Index......................9 to commercial enterprises. We examine 59 large divisions of the U.S. Government to see whether they have a markedly different About Us .....................................12 darknet footprint than the Fortune 500. Unfortunately, the results reveal that the U.S. Government has the largest collective darknet footprint of all of our darknet indices. By comparing how much compromised data was available on these numerous private networks, forums and channels, and running this information through our proprietary algorithm, we reached some key takeaways about the differences and similarities between the U.S. Government and large U.S. commercial entities. Intelligence gained from monitoring the darknets (Tor and other interconnected sources including IRC, I2P, ZeroNet, other hacker forums), as well as FTP servers, select paste sites, high-risk surface internet sites and more, constitutes what OWL Cybersecurity calls DARKINT™, or darknet intelligence.
    [Show full text]
  • OSINT Handbook September 2020
    OPEN SOURCE INTELLIGENCE TOOLS AND RESOURCES HANDBOOK 2020 OPEN SOURCE INTELLIGENCE TOOLS AND RESOURCES HANDBOOK 2020 Aleksandra Bielska Noa Rebecca Kurz, Yves Baumgartner, Vytenis Benetis 2 Foreword I am delighted to share with you the 2020 edition of the OSINT Tools and Resources Handbook. Once again, the Handbook has been revised and updated to reflect the evolution of this discipline, and the many strategic, operational and technical challenges OSINT practitioners have to grapple with. Given the speed of change on the web, some might question the wisdom of pulling together such a resource. What’s wrong with the Top 10 tools, or the Top 100? There are only so many resources one can bookmark after all. Such arguments are not without merit. My fear, however, is that they are also shortsighted. I offer four reasons why. To begin, a shortlist betrays the widening spectrum of OSINT practice. Whereas OSINT was once the preserve of analysts working in national security, it now embraces a growing class of professionals in fields as diverse as journalism, cybersecurity, investment research, crisis management and human rights. A limited toolkit can never satisfy all of these constituencies. Second, a good OSINT practitioner is someone who is comfortable working with different tools, sources and collection strategies. The temptation toward narrow specialisation in OSINT is one that has to be resisted. Why? Because no research task is ever as tidy as the customer’s requirements are likely to suggest. Third, is the inevitable realisation that good tool awareness is equivalent to good source awareness. Indeed, the right tool can determine whether you harvest the right information.
    [Show full text]