How we use DarkBERT?

1) Dark Web Page Classification: The Dark Web is home to numerous pages full of explicit content dedicated to different types of cybercrime. Automatically classifying pages based on their content is invaluable for timely Dark Web intelligence. DarkBERT achieves state-of-the-art performance on the dark web page classification task, which aims to classify webpage content into topics such as Pornography, Hacking, and Violence. Our page classification schema is described in Shedding New Light on the Language of the Dark Web.

Blank

2) Ransomware Leak Site Detection: Ransomware-operating cybercriminals often operate “leak sites” to publish confidential data of uncooperative victim companies. Finding these websites quickly is crucial to gather intelligence of high-profile ransomware groups. DarkBERT achieved state-of-the-art performance in automatically detecting leak sites.

3) Noteworthy Thread Detection: Underground forums serve as platforms for sharing and selling information related to various illegal activities. Monitoring forums is challenging since there are countless users that can make posts on any topic. Filtering posts to find noteworthy threads (such as those selling/sharing confidential information or malicious hacking tools) is essential for effective monitoring. DarkBERT achieved state-of-the-art performance in automatically detecting noteworthy forum threads.

Blank

4) Threat Keyword Inference: Some familiar words may have a completely different meaning in the dark web. DarkBERT is trained to understand slang and explicit language used by cybercriminals, allowing us to understand word usage in dark web contexts.