Darknet in the Cyberspace Security System

The author states the active use of the Shadow Internet by the criminal environment with a clear lag in forensic research of this level of the Internet. It should be borne in mind that although the Shadow Internet contains, according to various data, from 0.1 to 1% of the information of the entire Internet, but its active use for criminal purposes requires scientific study. The author examines the basics of the functioning of the Darknet network and states that the increased level of anonymization of this network is due to peer-to-peer interaction, onion and tunnel routing, mixing cascades, multi-stage data transfer and other methods. The article indicates that the main criminalistic methods of working with Darknet are aimed at hacking, extracting and researching information from some Darknet services, de-anonymizing and identifying users. The use of neural networks designed for Big Data analysis (Big Date) can be of great benefit in terms of de-an onymization of suspects on the Darknet network. The author off ers recommendations related to the use of peer—to-peer networks based on tunnel routing technologies 2IP (Invisible Internet Project – invisible Internet) and The Onion Router when working on the Darknet network. Summing up, the author states that the fight against illegal content and the use of the Shadow Internet for criminal purposes should be conducted comprehensively and systematically.