Network Security 2018

Anatomy of how stolen data appears on the dark web (and why you should care)

• Tyler Carbone, Chief Product Officer
• Monday, September 24th, 12:30pm - 1:15pm

The dark web is a structured economy which hosts various marketplaces, some dedicated exclusively to trading and selling stolen data. Security organizations are responsible for specific data that is important and valuable to their companies, as well as to criminals who look to monetize that same data. This includes everything from personal data (PII and account credentials) to financial data (payment card details, payroll records) to broader corporate data (employee, executive, and board member personal information, proprietary data, intellectual property, and source code).

How data is sold, how it appears, and how it is valued on the dark web are key factors to consider when updating security measures at a network level. With a comprehensive understanding of how illegal marketplaces are structured and operated, organizations can proactively place the right assets under monitoring and reactively confirm if detected data under monitoring leaked from their systems or from a third party, speeding up the remediation time and decreasing overall damage. You canât stop everything, but by using data intelligence, organizations can have visibility into their exposure on the dark web, helping to reduce the risk of the inevitable data exposure.

Key takeaways:

- Examples of how stolen data appears for sale on the dark web

- How to confirm if data found on the dark web came from your system or from a third party

- How criminals monetize each type of listing

- How to use dark web data with log data to aide in the investigation process