TY - JOUR AU - Steinebach, Martin AU - Schäfer, Marcel AU - Karakuz, Alexander AU - Brandl, Katharina PY - 2020/01/25 Y2 - 2024/03/28 TI - Detection and Analysis of Tor Onion Services JF - Journal of Cyber Security and Mobility JA - JCSANDM VL - 9 IS - 1 SE - ARES 2019 workshops DO - 10.13052/jcsm2245-1439.915 UR - https://journals.riverpublishers.com/index.php/JCSANDM/article/view/1141 SP - 141-174 AB - <p>Tor onion services can be accessed and hosted anonymously on the Tor network.<br>We analyze the protocols, software types, popularity and uptime of<br>these services by collecting a large amount of .onion addresses. Websites are<br>crawled and clustered based on their respective language. In order to also<br>determine the amount of unique websites a de-duplication approach is implemented.<br>To achieve this, we introduce a modular system for the real-time<br>detection and analysis of onion services. The overall data reveals<br>that a large amount of permanent services provide no actual content for Tor<br>users. A significant part consists instead of bots, services offered via multiple<br>domains, or duplicated websites for phishing attacks. The total amount of<br>onion services is thus significantly smaller than current statistics suggest</p> ER -