the owl cybersecurity darknet index - squarespace · introduction the owl cybersecurity darknet...

22
Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500 * using Darknet Intelligence (DARKINT) We live in an era where cybersecurity often dominates the news. Yahoo, Sony and Target are only three of the many companies subjected in recent years to costly cyber attacks. No company or organization is immune from these types of attacks, and billions of dollars are spent annually in an attempt to protect the valuable data they hold. Measuring cybersecurity risk therefore becomes important for any company seeking to implement a comprehensive cybersecurity strategy and justify a return on the increasing investments made. Several different risk measures exist— some financial, performance, or technology related, and others which attempt to measure the frequency of attacks thwarted. Each provides one aspect of guidance for management teams in their evaluation of overall risk. However, to date, there has been no attempt to measure the cybersecurity risk or profile of companies by how much data is available on a company that can be misused. How does the availability of breached data affect the overall the overall cybersecurity profile of a company? When data is hacked or stolen it often ends up for sale on an area of the internet known as the darknet. The darknet— actually a collection of numerous private networks, forums and channels—allows anyone using special browsers and tools to post data and communicate in a private online world. This facilitates the confidential and anonymous exchange of large amounts of stolen data. TABLE OF CONTENTS Introduction ......................................1 Methodology......................................3 The Top 25 .........................................5 Observations .....................................6 Conclusions........................................8 The Darknet Index............................9 About Us ...........................................22 OWLCYBER.COM 303-376-6265 * FORTUNE 500 is a trademark of Time Inc. Owl Cybersecurity, LLC is not affiliated with, maintained, authorized, endorsed, or sponsored by Time Inc. or any of its affiliates.

Upload: lamhanh

Post on 22-May-2018

286 views

Category:

Documents


2 download

TRANSCRIPT

Page 1: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

Introduction

The OWL Cybersecurity Darknet IndexReranking the Fortune 500* using Darknet Intelligence

(DARKINT)

We live in an era where cybersecurity often dominates the news. Yahoo, Sony and Target are only three of the many companies subjected in recent years to costly cyber attacks. No company or organization is immune from these types of attacks, and billions of dollars are spent annually in an attempt to protect the valuable data they hold.

Measuring cybersecurity risk therefore becomes important for any company seeking to implement a comprehensive cybersecurity strategy and justify a return on the increasing investments made. Several different risk measures exist—some financial, performance, or technology related, and others which attempt to measure the frequency of attacks thwarted. Each provides one aspect of guidance for management teams in their evaluation of overall risk.

However, to date, there has been no attempt to measure the cybersecurity risk or profile of companies by how much data is available on a company that can be misused. How does the availability of breached data affect the overall the overall cybersecurity profile of a company?

When data is hacked or stolen it often ends up for sale on an area of the internet known as the darknet. The darknet—actually a collection of numerous private networks, forums and channels—allows anyone using special browsers and tools to post data and communicate in a private online world. This facilitates the confidential and anonymous exchange of large amounts of stolen data.

TABLE OF CONTENTS

Introduction ......................................1Methodology......................................3The Top 25 .........................................5Observations .....................................6Conclusions........................................8The Darknet Index............................9About Us ...........................................22

OWLCYBER.COM 303-376-6265

* FORTUNE 500 is a trademark of Time Inc. Owl Cybersecurity, LLC is not affiliated with,

maintained, authorized, endorsed, or sponsored by Time Inc. or any of its affiliates.

Page 2: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

OWLCYBER.COM 303-234-1231

OWL CYBERSECURITY DARKNET INDEX

Key Takeaways From Our Analysis

Unlike the surface web — the internet most of us use every day — there is little indexing of darknet sites. In fact, until now, there has been no easy way to comprehensively measure a company’s presence on the darknet. OWL Cybersecurity has built a proprietary database of darknet content which is the most comprehensive one of its kind in the world. This database is automatically and continuously updated with between 10 to 15 million pages per day, from more than 24,000 domains on the Tor network alone, as well as other darknet networks. Our darknet content is indexed and searchable in 47 languages for organizations wishing to monitor their data on the darknet.

To demonstrate how the unprecedented scope and scale of our darknet data can strengthen a cybersecurity program, we used our OWL Vision database, together with additional sources of DARKINT™ — or darknet intelligence — to rerank all members of the Fortune 500 (as of April 2017) based on their darknet footprint. By doing this, we can provide each company with a snapshot view of its exposure on the darknet relative to peers, something we are uniquely positioned to provide.

• Every Fortune 500 company is exposed. Every single company in the Fortune 500 had a positive Darknet Index score, meaning they have a presence on the darknet.

• Amazon leads the Index. The company with the largest darknet footprint is online retailer Amazon, who has a massive internet presence and possesses a significant amount of customer data.

• Technology and telecommunications companies overall are the largest target. Technology and telecommunication firms have the highest Darknet Index scores, indicating that they are the most attractive firms targeted by threat actors.

• Financial firms perform better than expected. Financial firms—frequent targets of hackers—fare better than expected, likely reflecting their focus on significant investment in cybersecurity in recent years.

• Hacked valuable data = increased risk. The highest scoring companies all had credentials and/or intellectual property exposed on the darknet which can be monetized by others.

• Vigilance pays off. Investing in cybersecurity has tangible Darknet Index score benefits. Sectors which have invested heavily have, in some cases, smaller darknet footprints and, thus, lower Index ratings.

PAGE 2

OWLCYBER.COM 303-376-6265

Page 3: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

OWL CYBERSECURITY DARKNET INDEX PAGE 3

OWLCYBER.COM 303-376-6265

Methodology

One of the biggest hurdles to widespread awareness of darknet activity is the lack of any reliable indices. Unlike the surface web, on which many organizations continuously capture and record internet activity in a historical archive, the darknet is designed to be difficult to trace. The use of special browsers is required, and users need to obtain the full URL of a destination darknet web page to visit. There is no “darknet Google,” and darknet sites are often put up and taken down within a matter of minutes to maintain anonymity.

As a result, the darknet has become a safe harbor for those looking to remain private online, whether their intentions are good or bad. A high volume of criminal activity has migrated to the darknet.

“According to our scale, every company on the Fortune 500 has a darknet ranking.”

OWL Cybersecurity’s proprietary OWL Vision is an expansive darknet database which can be queried via Boolean logic, proximity search, email domains, and more. Leveraging this, OWL Cybersecurity assessed each company in the 2017 Fortune 500 list, ultimately assigning every company with an overall darknet footprint. Combined with our proprietary hackishness algorithm — which rates darknet postings based on their potential for criminal use — our calculations yielded notable results.

To compile our Darknet Index, we ran each member of the 2017 Fortune 500 through the OWL Vision database. We focused on specific darknets for matches on each company’s website and email domains and then further adjusted the results based on computations of “hackishness”— our algorithmic rating system which scores based on the likelihood the data could be used for nefarious intent and/or has been recorded within a recent timeframe. Recent results, from within the last 90 days, were given the most weight, as recent breaches or data leaks containing an organization’s proprietary information often make the company a target.

All mirror sites (which can be otherwise considered duplicate data) of both darknet and surface net results were excluded.

Page 4: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

OWL CYBERSECURITY DARKNET INDEX PAGE 4

OWLCYBER.COM 303-376-6265

• The Index is simple and objective. It is not biased toward company nicknames, press mentions, company size, CEO names or other subjective measures.

• The Index scale is logarithmic, meaning every point in the index reflects almost triple the profile of a single point less.

• The Index ranking reflects the attractiveness of the target. It is not a “risk of breach”. It is more closely aligned to the attractiveness of the target to a hacker while taking into account the effectiveness of their cyber defenses.

• The size of a single breach is less of a factor than the frequency of breaches over the study period.

• A company’s ranking as compared with direct competitors is very important. In future reports, we will take a closer look at more specific industry data to see the extent to which industry relates to a company’s DARKINT footprint.

Key Methodological Points

Algorithm

Our hackishness algorithm is the most critical input to these rankings as it eliminates uninteresting content hits. For simplicity, our algorithm weighted results from Tor Hidden Services and transitory sites most heavily. All results found in our database were given some weight as per the formula below:

H1 * ( loge ( # Results from Darknet Sites) + loge ( # Results from Transitory Sites) ) + H2* ( loge ( # All Time Results) )

H1 = Hackishness of last 90 days results

H2 = Hackishness of all time results

Page 5: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

OWL CYBERSECURITY DARKNET INDEX PAGE 5

OWLCYBER.COM 303-376-6265

DARKINT Rank

Fortune 500 Rank Company Name

Darknet Index Score Company Sector

1 18 Amazon.com 19.16 Technology2 36 Alphabet (Google) 17.21 Technology3 3 Apple 15.98 Technology4 157 Facebook 14.99 Technology5 300 eBay 14.55 Technology6 85 American Express 13.33 Financials7 461 Frontier Communications 13.29 Telecommunications8 379 Netflix 13.19 Retail9 219 Texas Instruments 12.99 Technology

10 58 FedEx 12.58 Transportation11 27 Wells Fargo 12.31 Financials12 25 Microsoft 12.23 Technology13 67 American Airlines Group 12.06 Transportation14 10 AT&T 12.01 Telecommunications15 37 Comcast 12.01 Telecommunications16 11 General Electric 12.00 Industrials17 77 Oracle 11.95 Technology18 78 Morgan Stanley 11.57 Financials19 20 HP 11.54 Technology20 51 Intel 11.31 Technology21 60 Lockheed Martin 11.30 Aerospace & Defense22 53 Disney 10.88 Media23 35 State Farm Insurance Cos. 10.77 Financials24 71 Best Buy 10.72 Retail25 75 Honeywell International 10.63 Industrials

The OWL Cybersecurity Darknet Index: Top 25

The results of our analysis are presented below for the top 25 companies in our Index as follows. The full ranking of the Fortune 500 companies by their darknet footprint can be found in the Darknet Index section (Page 9). We categorize all companies using the following metrics:

• DARKINT Rank - The rank of each company based on their darknet footprint score.

• Fortune 500 Rank - The rank each company is given on the annual list.

• Darknet Index Score - The darknet footprint score on which the rankings are based.

• Company Sector - The market segment as defined by the Fortune 500 list.

Page 6: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

OWL CYBERSECURITY DARKNET INDEX PAGE 6

OWLCYBER.COM 303-376-6265

Every company on the Fortune 500 has a darknet ranking. This fact alone offers a glimpse into the sheer volume of information available on the darknet and confirms that no company or organization is without risk on the darknet.

The importance of the hackishness rating is seen in the case of eBay. Without such a weighting, eBay would have been by far the most highly ranked DARKINT company, with more than four times the results to its next closest entrant. Yet, when weighted for hackishness, eBay dropped to #5 (reducing its darknet footprint by more than 500 percent). Put simply, eBay has a great deal of data on the darknet, but much of the data’s potential criminal value was low.

The company with the largest hackishness-rated darknet footprint, Amazon, is not a surprise given their massive internet presence and the fraud potential of the data they maintain. In fact, the Top 5 Darknet Index firms, Amazon, Google, Apple, Facebook and eBay, are all in the Technology sector and all use credentials extensively. Perhaps surprisingly, however, no bank registered in the top 10.

• Highest industry scores go to Technology and Telecommunications, which have both broad credentials coupled with typically smaller cybersecurity defense budgets.

• Finance and Healthcare, which receive much compliance and media focus, have industry index results within the expected range which implies their cybersecurity spending is in line with their needs.

• 6 of the top 10 ranked companies are ones that most people interact with on a regular, if not daily, basis.

• What matters most is a firm’s ranking as compared with its direct competitors. Simple statistical analysis tools become useful in evaluating each Sector.

• These rankings will change markedly over time based on multiple factors both within a company’s control and beyond.

Key Takeaways

Observations

Page 7: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

OWL CYBERSECURITY DARKNET INDEX PAGE 7

OWLCYBER.COM 303-376-6265

Company Sector

Number of

Entries

Average Fortune 500

Rank

Average DARKINT

Rank

Difference (Fortune 500 – DARKINT)

Index Profile +/- 10%

Technology 39 235 157 78 higherRetail 46 242 314 (72) lowerEnergy 62 255 272 (17) sameFinancials 79 243 233 10 sameHealthcare 45 206 229 (24) sameTelecommunications 12 246 187 58 higherWholesale 27 273 331 (58) lowerMedia 10 243 235 8 sameFood, Beverages & Tobacco 25 240 318 (77) lowerAerospace & Defense 12 204 243 (39) lowerTransportation 18 254 224 30 higherIndustrials 15 210 214 (4) sameFood and Drug Stores 7 83 307 (224) much lowerChemicals 13 258 206 52 higherBusiness Services 19 334 250 84 higherApparel 5 293 312 (19) sameHousehold Products 13 311 255 56 higherMotor Vehicles 13 242 211 31 higherHotels, Restaurants & Leisure 10 275 232 44 higherEngineering Construction 11 324 212 112 much higherMaterials 19 341 297 44 higher

Overall, we found most Index Profiles make intuitive sense. Food and Drug Stores, for example, are not obvious targets of malicious actors while the intellectual property at organizations like large Engineering Construction firms make them candidates for hackers. Neither of these sectors is known for spending excessively in cybersecurity. The fact that companies in the Financial sector tend to score well in our survey attests to the success of their cybersecurity efforts as an industry, although results vary across firms. Anomalies such as Frontier Communication’s unexpectedly high ranking as well as Berkshire Hathaway’s low ranking may not be conclusive, but they are statistical outliers worth noting.

Index Profile Analysis by Company Sector

We included an Index Profile +/-10% analysis to denote a company’s relative darknet footprint rank out of 500, as compared to their Fortune 500 rank. If the resulting percentage is above 10 percent, it indicates a statistically significant differential in darknet index ranking versus Fortune 500 ranking. We included this analysis to demonstrate that companies of various sectors, size and revenue may have disproportionate darknet footprints, and that the vulnerability of the darknet does not necessarily correlate with what many may assume in a rankable, correlated risk.

Page 8: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

OWL CYBERSECURITY DARKNET INDEX PAGE 8

OWLCYBER.COM 303-376-6265

Conclusions

This reranking of the Fortune 500 presents a mere sliver of OWL Cybersecurity’s darknet database which includes information on tens of thousands of additional organizations and individuals. In some cases, private data for sale may have come from a breach at a Fortune 500 company, but it may not be identified as such. For example, a group of credit card credentials for sale could have been illegally obtained from either a bank or a retailer, but that information isn’t always provided or available.

What is important is not only any company’s score but also comparing this score against their competitors and watching it over time. That is, for any firm to have a truly accurate snapshot of their DARKINT footprint is important and requires customization. OWL Cybersecurity does these routinely, as can be seen in the sample DARKINT footprint report (pictured).

By monitoring one’s customized DARKINT footprint score over time, the efficacy of an organization’s cybersecurity efforts can be reasonably measured. As shown by the fact that the entirety of the Fortune 500 is present in our Darknet Index, DARKINT is a key to a complete information security approach.

Today, in an age where data loss is virtually inevitable, it is critical to look at the darknet as a key part of a complete cybersecurity program, enabling organizations to swiftly detect security gaps and mitigate damage prior to the misuse of data.

Client// DARKINT FOOTPRINTMAR 2017 REPORT

A darknet footprint is a measure of your presence on the darknet. It looks at the volume of an orga-nization’s digital data that could be used for nefa-rious purposes, exposed on the darknet as a result of hacks, breaches, or other leak(s). OWL Cybersecurity leverages DARKINT, darknet

..........................................................................................................................................................................................................................................................................................................................................................................

..........................................................................................................................................................................................................................................................................................................................................................................

Prepared by: [email protected]

9CREDENTIALS

DETECTED

EXECUTIVE SUMMARY:

We found 1114 credentials within our database, 3 belong to executi-ves. Of those 1114 occurances, 1109 were from data dumps. A majority (994) of those credentials were part of a social media leak in June 2016 and the remainder in February 2017. Between July 2016 and January 2017, there was a few instances of leaked email addres-ses. Addtionally, we also searched the database for instances of your 594 domains and 1 of your 0/20 networks - of those we found a total of 12 mentions in the databa-se.

intelligence, to determine a darknet footprint. DARKINT encompasses actionable data from the darknet and other interconnected sources, inclu-ding TOR, IRC channels, hacker forums, FTP Servers, paste sites, high-risk surface internet, and more.

4

1

6

2*PLAIN TEXTPASSWORDS

DATA DUMPSDEEPWEB

TOR

OWL Cybersecurity | 216 16th St. Suite 700 Denver, CO 80202 | www.owlcyber.com

NOV 2016 DEC 2016 JAN 2017 FEB 2017 MAR 2017

5

4

3

2

1

7

6

DETECTED

46

OCCURANCES OF CREDENTIALS OVER TIME

..........................................................................................................................................................................................................................................................................................................................................................................

..........................................................................................................................................................................................................................................................................................................................................................................

DARKINT THREATS DETECTED

// Domain Threats: 60 Domains Queried

10 19 30TOR DEEP WEB SURFACE WEB

DETECTED

3// IP Address Threats: 10.1.1.16.

2 1 0TOR DEEP WEB SURFACE WEB

DARKINT FOOTPRINT

2EXECUTIVESDETECTED

Page 9: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

The Darknet Index Ranking of the Fortune 500

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

1 18 Amazon.com 19.16 Technology2 36 Alphabet (Google) 17.21 Technology3 3 Apple 15.98 Technology4 157 Facebook 14.99 Technology5 300 eBay 14.55 Technology6 85 American Express 13.33 Financials7 461 Frontier Communications 13.29 Telecommunications8 379 Netflix 13.19 Retail9 219 Texas Instruments 12.99 Technology

10 58 FedEx 12.58 Transportation11 27 Wells Fargo 12.31 Financials12 25 Microsoft 12.23 Technology13 67 American Airlines Group 12.06 Transportation14 10 AT&T 12.01 Telecommunications15 37 Comcast 12.01 Telecommunications16 11 General Electric 12.00 Industrials17 77 Oracle 11.95 Technology18 78 Morgan Stanley 11.57 Financials19 20 HP 11.54 Technology20 51 Intel 11.31 Technology21 60 Lockheed Martin 11.30 Aerospace & Defense22 53 Disney 10.88 Media23 35 State Farm Insurance Cos. 10.77 Financials24 71 Best Buy 10.72 Retail25 75 Honeywell International 10.63 Industrials26 307 PayPal Holdings 10.56 Business Services27 26 Bank of America Corp. 10.52 Financials28 74 Goldman Sachs Group 10.51 Financials29 9 Ford Motor 10.50 Motor Vehicles30 451 Motorola Solutions 10.49 Technology31 179 Bank of New York Mellon Corp. 10.42 Financials32 54 Cisco Systems 10.41 Technology33 55 Pfizer 10.40 Health Care34 120 Raytheon 10.34 Aerospace & Defense35 13 Verizon 10.32 Telecommunications36 91 Nike 10.26 Apparel

OWL CYBERSECURITY DARKNET INDEX PAGE 9

OWLCYBER.COM 303-376-6265

Page 10: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

37 29 Citigroup 10.20 Financials38 38 Target 10.19 Retail39 34 Procter & Gamble 10.08 Household Products40 81 Allstate 10.07 Financials41 72 Merck 10.05 Health Care42 14 Chevron 10.02 Energy43 292 Charter Communications 9.91 Telecommunications44 233 Computer Sciences 9.89 Technology45 259 CBRE Group 9.84 Financials46 138 Abbott Laboratories 9.75 Health Care47 68 Delta Air Lines 9.75 Transportation48 1 Walmart 9.73 Retail49 152 Hartford Financial Services Group 9.62 Financials50 156 AECOM 9.56 Engineering Construction51 150 Xerox 9.49 Technology52 148 Cummins 9.49 Industrials53 254 Hilton Worldwide Holdings 9.48 Hotels, Resturants and Leisure54 235 Jacobs Engineering Group 9.45 Engineering Construction55 24 Boeing 9.44 Aerospace & Defense56 8 General Motors 9.38 Motor Vehicles57 70 Johnson Controls 9.37 Motor Vehicles58 171 PNC Financial Services Group 9.34 Financials59 349 Newmont Mining 9.33 Energy60 48 UPS 9.30 Transportation61 40 MetLife 9.29 Financials62 400 Symantec 9.28 Technology63 195 Marriott International 9.28 Hotels, Resturants and Leisure64 251 WestRock 9.28 Materials65 96 Twenty-First Century Fox 9.27 Media66 59 Caterpillar 9.23 Industrials67 2 Exxon Mobil 9.18 Energy68 151 Kimberly-Clark 9.17 Household Products69 69 Nationwide 9.07 Financials70 44 PepsiCo 9.05 Food, Beverages and Tobacco71 245 L-3 Communications 9.04 Aerospace & Defense72 117 Halliburton 9.04 Energy73 128 Emerson Electric 9.01 Industrials

OWL CYBERSECURITY DARKNET INDEX PAGE 10

OWLCYBER.COM 303-376-6265

Page 11: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

74 386 salesforce.com 8.99 Technology75 56 Dow Chemical 8.98 Chemicals76 126 Arconic (formerly Alcoa) 8.93 Materials77 478 CH2M Hill 8.90 Engineering Construction78 264 State Street Corp. 8.89 Financials79 155 Fluor 8.89 Engineering Construction80 7 CVS Health 8.88 Food and Drug Stores81 248 ADP 8.85 Business Services82 286 Baxter International 8.84 Health Care83 49 AIG 8.83 Financials84 131 U.S. Bancorp 8.78 Financials85 63 HCA Holdings 8.77 Health Care86 105 Travelers Cos. 8.76 Financials87 90 ConocoPhillips 8.75 Energy88 287 Stryker 8.75 Health Care89 80 United Continental Holdings 8.74 Transportation90 52 Humana 8.71 Health Care91 141 Eli Lilly 8.68 Health Care92 409 NCR 8.65 Technology93 132 Staples 8.62 Retail94 482 Raymond James Financial 8.61 Financials95 329 SunTrust Banks 8.60 Financials96 189 Monsanto 8.59 Chemicals97 97 Deere 8.52 Industrials98 113 EMC 8.47 Technology99 376 Fifth Third Bancorp 8.47 Financials

100 168 Bristol-Myers Squibb 8.46 Health Care101 5 McKesson 8.46 Health Care102 164 Thermo Fisher Scientific 8.46 Technology103 161 General Mills 8.44 Food, Beverages and Tobacco104 178 Baker Hughes 8.44 Energy105 130 Amgen 8.41 Health Care106 332 American Family Insurance Group 8.37 Financials107 205 Lincoln National 8.35 Financials108 294 MasterCard 8.35 Business Services109 220 CDW 8.35 Technology110 162 Southern 8.34 Energy111 112 Capital One Financial 8.34 Financials

OWL CYBERSECURITY DARKNET INDEX PAGE 11

OWLCYBER.COM 303-376-6265

Page 12: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

112 79 Cigna 8.30 Health Care113 137 Progressive 8.28 Financials114 172 Health Net 8.25 Health Care115 192 National Oilwell Varco 8.24 Energy116 447 Quintiles Transnational Holdings 8.23 Health Care117 255 R.R. Donnelley & Sons 8.23 Media118 382 Jones Financial 8.22 Financials119 158 Jabil Circuit 8.21 Technology120 253 Sherwin-Williams 8.21 Chemicals121 95 Exelon 8.20 Energy122 154 Lear 8.19 Motor Vehicles123 239 CSX 8.19 Transportation124 247 Entergy 8.17 Energy125 199 Aramark 8.15 Business Services126 492 Fiserv 8.12 Business Services127 243 Dominion Resources 8.11 Energy128 423 Graybar Electric 8.10 Wholesale129 314 Peter Kiewit Sons’ 8.10 Engineering Construction130 313 Corning 8.08 Technology131 86 Gilead Sciences 8.07 Health Care132 28 Home Depot 8.05 Retail133 50 Prudential Financial 8.04 Financials134 190 AES 8.01 Energy135 224 Parker-Hannifin 7.99 Industrials136 271 Reinsurance Group of America 7.98 Financials137 333 Level 3 Communications 7.96 Telecommunications138 406 Discovery Communications 7.96 Media139 73 Liberty Mutual Insurance Group 7.95 Financials140 206 Ecolab 7.95 Chemicals141 41 Archer Daniels Midland 7.94 Food, Beverages and Tobacco142 208 C.H. Robinson Worldwide 7.93 Transportation143 134 Whirlpool 7.93 Industrials144 46 Aetna 7.92 Health Care145 43 Freddie Mac 7.91 Financials146 497 First American Financial 7.91 Financials147 6 UnitedHealth Group 7.88 Health Care148 295 Applied Materials 7.88 Technology149 450 Mattel 7.87 Household Products

OWL CYBERSECURITY DARKNET INDEX PAGE 12

OWLCYBER.COM 303-376-6265

Page 13: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

150 21 Cardinal Health 7.85 Health Care151 370 Avon Products 7.83 Household Products152 269 Hertz Global Holdings 7.82 Retail153 182 PPG Industries 7.81 Chemicals154 288 Air Products & Chemicals 7.81 Chemicals155 375 Sealed Air 7.80 Materials156 465 St. Jude Medical 7.79 Health Care157 207 Kellogg 7.79 Food, Beverages and Tobacco158 124 Centene 7.79 Health Care159 236 Principal Financial 7.77 Financials160 100 Northwestern Mutual 7.77 Financials161 140 Tenet Healthcare 7.77 Health Care162 320 HD Supply Holdings 7.75 Wholesale163 262 Praxair 7.72 Chemicals164 102 Avnet 7.71 Wholesale165 230 Cognizant Technology Solutions 7.70 Technology166 66 Tyson Foods 7.69 Food, Beverages and Tobacco167 127 International Paper 7.68 Materials168 115 Duke Energy 7.66 Energy169 490 Rockwell Collins 7.66 Aerospace & Defense170 228 J.C. Penney 7.65 Retail171 166 PG&E Corp. 7.64 Energy172 373 Weyerhaeuser 7.63 Materials173 169 Goodyear Tire & Rubber 7.62 Motor Vehicles174 453 Celanese 7.60 Chemicals175 444 Starwood Hotels & Resorts 7.59 Hotels, Resturants and Leisure176 325 Laboratory Corp. of America 7.58 Health Care177 103 Macy’s 7.58 Retail178 226 Guardian Life Ins. Co. of America 7.57 Financials179 15 Costco 7.56 Retail180 285 W.W. Grainger 7.54 Wholesale181 216 Devon Energy 7.53 Energy182 272 Public Service Enterprise Group 7.51 Energy183 378 Huntington Ingalls Industries 7.51 Aerospace & Defense184 197 Nordstrom 7.49 Retail185 47 Lowe’s 7.45 Retail186 474 Insight Enterprises 7.43 Wholesale187 225 Occidental Petroleum 7.43 Energy188 229 Consolidated Edison 7.42 Energy

OWL CYBERSECURITY DARKNET INDEX PAGE 13

OWLCYBER.COM 303-376-6265

Page 14: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

189 159 CenturyLink 7.42 Telecommunications190 165 American Electric Power 7.42 Energy191 218 Yum Brands 7.37 Hotels, Resturants and Leisure192 278 Becton Dickinson 7.37 Health Care193 174 Colgate-Palmolive 7.36 Household Products194 146 Starbucks 7.36 Hotels, Resturants and Leisure195 324 Anadarko Petroleum 7.36 Energy196 422 NetApp 7.34 Technology197 470 Visteon 7.33 Motor Vehicles198 32 Valero Energy 7.29 Energy199 250 BlackRock 7.27 Financials200 196 Office Depot 7.26 Retail201 110 Qualcomm 7.25 Technology202 391 Anixter International 7.24 Wholesale203 175 Freeport-McMoRan 7.17 Energy204 311 Fidelity National Financial 7.14 Financials205 160 Supervalu 7.13 Food and Drug Stores206 466 Wyndham Worldwide 7.12 Hotels, Resturants and Leisure207 467 Kelly Services 7.12 Business Services208 194 Western Digital 7.11 Technology209 488 Simon Property Group 7.11 Financials210 436 Jones Lang LaSalle 7.09 Financials211 204 Visa 7.08 Business Services212 438 Marathon Oil 7.07 Energy213 471 Arthur J. Gallagher 7.07 Financials214 428 Dana Holding 7.07 Motor Vehicles215 200 DaVita HealthCare Partners 7.07 Health Care216 396 Terex 7.06 Industrials217 319 Cameron International 7.06 Energy218 274 DTE Energy 7.05 Energy219 221 Waste Management 7.05 Business Services220 99 Time Warner 7.04 Media221 385 Expedia 7.03 Technology222 394 Hess 7.00 Energy223 405 JetBlue Airways 6.98 Transportation224 397 Coca-Cola European Partners 6.97 Food, Beverages and Tobacco225 119 Arrow Electronics 6.96 Wholesale226 198 Kinder Morgan 6.95 Energy227 366 Live Nation Entertainment 6.95 Media

OWL CYBERSECURITY DARKNET INDEX PAGE 14

OWLCYBER.COM 303-376-6265

Page 15: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

228 358 Quest Diagnostics 6.92 Health Care229 64 Ingram Micro 6.92 Wholesale230 306 Genworth Financial 6.91 Financials231 114 USAA 6.91 Financials232 12 AmerisourceBergen 6.90 Health Care233 435 Avery Dennison 6.88 Materials234 401 Charles Schwab 6.87 Financials235 341 Ball 6.86 Materials236 472 Host Hotels & Resorts 6.86 Financials237 443 Windstream Holdings 6.83 Telecommunications238 381 EMCOR Group 6.83 Engineering Construction239 408 Sanmina 6.82 Technology240 177 Gap 6.82 Retail241 390 Expeditors International of Washington 6.81 Transportation242 249 First Data 6.81 Business Services243 331 Broadcom 6.81 Technology244 261 Estee Lauder 6.81 Household Products245 410 FMC Technologies 6.79 Energy246 136 AutoNation 6.76 Retail247 336 Dean Foods 6.75 Food, Beverages and Tobacco248 107 Rite Aid 6.75 Food and Drug Stores249 173 Micron Technology 6.74 Technology250 464 SanDisk 6.71 Technology251 108 Tech Data 6.71 Wholesale252 231 VF 6.68 Apparel253 364 Williams 6.68 Energy254 468 Western Union 6.68 Business Services255 270 Norfolk Southern 6.68 Transportation256 275 Assurant 6.62 Financials257 176 ConAgra Foods 6.62 Food, Beverages and Tobacco258 499 Cincinnati Financial 6.62 Financials259 265 Unum Group 6.60 Financials260 33 Anthem 6.58 Health Care261 16 Fannie Mae 6.57 Financials262 371 Darden Restaurants 6.57 Hotels, Resturants and Leisure263 310 Autoliv 6.56 Motor Vehicles264 392 Fidelity National Information Services 6.51 Business Services265 125 Community Health Systems 6.50 Health Care266 129 Union Pacific 6.50 Transportation

OWL CYBERSECURITY DARKNET INDEX PAGE 15

OWLCYBER.COM 303-376-6265

Page 16: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

267 215 Land O’Lakes 6.48 Food, Beverages and Tobacco268 493 Spectra Energy 6.47 Energy269 290 Universal Health Services 6.46 Health Care270 403 CMS Energy 6.46 Energy271 296 Eastman Chemical 6.44 Chemicals272 260 D.R. Horton 6.43 Engineering Construction273 22 Express Scripts Holding 6.43 Health Care274 147 Paccar 6.41 Motor Vehicles275 257 Xcel Energy 6.40 Energy276 480 Owens Corning 6.40 Materials277 399 Cablevision Systems 6.39 Telecommunications278 419 Harman International Industries 6.37 Industrials279 301 Lennar 6.37 Engineering Construction280 61 New York Life Insurance 6.36 Financials281 240 Toys “R” Us 6.35 Retail282 357 WESCO International 6.32 Wholesale283 346 Lithia Motors 6.32 Retail284 305 Celgene 6.32 Health Care285 213 Viacom 6.29 Media286 395 Ryder System 6.29 Transportation287 281 Navistar International 6.28 Motor Vehicles288 149 Altria Group 6.27 Food, Beverages and Tobacco289 425 Ameren 6.27 Energy290 432 Harley-Davidson 6.27 Transportation291 455 Clorox 6.25 Household Products292 101 DuPont 6.25 Chemicals293 486 Citizens Financial Group 6.25 Financials294 17 Kroger 6.24 Food and Drug Stores295 298 Ally Financial 6.22 Financials296 363 CenterPoint Energy 6.18 Energy297 304 Hormel Foods 6.17 Food, Beverages and Tobacco298 76 Massachusetts Mutual Life Insurance 6.17 Financials299 106 Philip Morris International 6.16 Food, Beverages and Tobacco300 268 Henry Schein 6.14 Health Care301 241 Las Vegas Sands 6.13 Hotels, Resturants and Leisure302 104 Enterprise Products Partners 6.10 Energy303 372 Kindred Healthcare 6.10 Health Care304 459 Alaska Air Group 6.09 Transportation305 316 Mosaic 6.09 Chemicals

OWL CYBERSECURITY DARKNET INDEX PAGE 16

OWLCYBER.COM 303-376-6265

Page 17: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

306 416 J.B. Hunt Transport Services 6.08 Transportation307 441 HRG Group 6.07 Household Products308 337 Campbell Soup 6.07 Food, Beverages and Tobacco309 135 Aflac 6.06 Financials310 143 Penske Automotive Group 6.06 Retail311 404 Alliance Data Systems 6.05 Business Services312 42 Marathon Petroleum 6.05 Energy313 256 Stanley Black & Decker 6.04 Household Products314 389 Spirit AeroSystems Holdings 6.04 Aerospace & Defense315 413 Dr Pepper Snapple Group 6.03 Food, Beverages and Tobacco316 326 Pacific Life 6.00 Financials317 323 Veritiv 6.00 Wholesale318 433 PulteGroup 5.99 Engineering Construction319 411 Erie Insurance Group 5.96 Financials320 244 United States Steel 5.94 Materials321 338 Mohawk Industries 5.94 Household Products322 367 Mutual of Omaha Insurance 5.93 Financials323 334 Tenneco 5.93 Motor Vehicles324 440 United Rentals 5.93 Business Services325 430 LifePoint Health 5.90 Health Care326 489 Domtar 5.89 Materials327 318 Thrivent Financial for Lutherans 5.89 Financials328 339 BorgWarner 5.88 Motor Vehicles329 188 FirstEnergy 5.88 Energy330 483 NiSource 5.85 Energy331 312 Republic Services 5.85 Business Services332 227 Farmers Insurance Exchange 5.82 Financials333 369 LKQ 5.81 Wholesale334 258 Murphy USA 5.81 Retail335 322 EOG Resources 5.81 Energy336 277 Huntsman 5.81 Chemicals337 351 SpartanNash 5.81 Wholesale338 452 J.M. Smucker 5.81 Food, Beverages and Tobacco339 348 Oneok 5.79 Energy340 437 WEC Energy Group 5.78 Energy341 308 Priceline Group 5.77 Technology342 402 Calpine 5.76 Energy343 476 Markel 5.76 Financials344 458 Peabody Energy 5.70 Energy

OWL CYBERSECURITY DARKNET INDEX PAGE 17

OWLCYBER.COM 303-376-6265

Page 18: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

345 202 WellCare Health Plans 5.69 Health Care346 417 Commercial Metals 5.69 Materials347 335 United Natural Foods 5.69 Wholesale348 89 TJX 5.69 Retail349 362 Hershey 5.68 Food, Beverages and Tobacco350 280 AutoZone 5.67 Retail351 4 Berkshire Hathaway 5.67 Financials352 434 Newell Brands 5.66 Household Products353 484 Airgas 5.63 Wholesale354 237 Ross Stores 5.58 Retail355 201 Molina Healthcare 5.53 Health Care356 191 CarMax 5.52 Retail357 209 Textron 5.52 Aerospace & Defense358 481 S&P Global 5.48 Business Services359 388 Apache 5.45 Energy360 98 Tesoro 5.44 Energy361 185 Performance Food Group 5.44 Wholesale362 350 PPL 5.44 Energy363 485 ABM Industries 5.43 Business Services364 330 Avis Budget Group 5.42 Retail365 144 ManpowerGroup 5.41 Business Services366 65 Energy Transfer Equity 5.38 Energy367 212 Synnex 5.37 Wholesale368 193 NRG Energy 5.36 Energy369 293 Advance Auto Parts 5.33 Retail370 340 PVH 5.32 Apparel371 360 AGCO 5.32 Industrials372 266 Reynolds American 5.31 Food, Beverages and Tobacco373 418 Owens-Illinois 5.30 Materials374 31 IBM 5.29 Technology375 380 Dillard’s 5.29 Retail376 361 Foot Locker 5.26 Retail377 170 Nucor 5.26 Materials378 446 Packaging Corp. of America 5.26 Materials379 457 Genesis Healthcare 5.26 Health Care380 303 Reliance Steel & Aluminum 5.24 Materials381 139 Dollar General 5.24 Retail382 283 Discover Financial Services 5.23 Financials383 223 Chesapeake Energy 5.21 Energy

OWL CYBERSECURITY DARKNET INDEX PAGE 18

OWLCYBER.COM 303-376-6265

Page 19: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

384 291 Owens & Minor 5.21 Health Care385 453 Regions Financial 5.19 Financials386 183 Genuine Parts 5.18 Wholesale387 203 CBS 5.15 Media388 302 GameStop 5.13 Retail389 282 Precision Castparts 5.12 Aerospace & Defense390 500 Burlington Stores 5.11 Retail391 327 News Corp. 5.10 Media392 84 CHS 5.07 Food, Beverages and Tobacco393 498 NVR 5.06 Engineering Construction394 355 Interpublic Group 5.06 Business Services395 495 Big Lots 5.06 Retail396 343 Eversource Energy 5.04 Energy397 472 Ashland 5.01 Chemicals398 309 MGM Resorts International 4.99 Hotels, Resturants and Leisure399 180 Dollar Tree 4.99 Retail400 449 Realogy Holdings 4.89 Financials401 491 Lam Research 4.84 Technology402 45 United Technologies 4.84 Aerospace & Defense403 368 W.R. Berkley 4.83 Financials404 116 Time Warner Cable 4.77 Telecommunications405 222 Marsh & McLennan 4.76 Financials406 163 NextEra Energy 4.76 Energy407 469 Envision Healthcare Holdings 4.75 Health Care408 279 Sempra Energy 4.72 Energy409 342 O’Reilly Automotive 4.71 Retail410 415 Tractor Supply 4.68 Retail411 321 Crown Holdings 4.66 Materials412 92 World Fuel Services 4.66 Wholesale413 412 Rockwell Automation 4.65 Industrials414 383 AK Steel Holding 4.63 Materials415 347 KKR 4.61 Financials416 111 Sears Holdings 4.59 Retail417 424 Oshkosh 4.53 Motor Vehicles418 19 Walgreens Boots Alliance 4.50 Food and Drug Stores419 354 Ralph Lauren 4.45 Apparel420 407 Trinity Industries 4.45 Transportation421 479 Western & Southern Financial Group 4.42 Financials422 475 Energy Future Holdings 4.42 Energy

OWL CYBERSECURITY DARKNET INDEX PAGE 19

OWLCYBER.COM 303-376-6265

Page 20: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

423 398 Auto-Owners Insurance 4.42 Financials424 121 Plains GP Holdings 4.41 Energy425 93 3M 4.38 Industrials426 252 Voya Financial 4.35 Financials427 23 J.P. Morgan Chase 4.32 Financials428 317 Core-Mark Holding 4.23 Wholesale429 345 Masco 4.22 Household Products430 214 HollyFrontier 4.22 Energy431 211 Illinois Tool Works 4.18 Industrials432 87 Publix Super Markets 4.18 Food and Drug Stores433 133 Danaher 4.16 Technology434 267 Group 1 Automotive 4.16 Retail435 297 Sonic Automotive 4.13 Retail436 276 Global Partners 4.13 Wholesale437 387 Targa Resources 4.07 Energy438 439 TravelCenters of America 4.05 Retail439 496 Telephone & Data Systems 4.03 Telecommunications440 352 Quanta Services 3.94 Engineering Construction441 429 Constellation Brands 3.90 Food, Beverages and Tobacco442 289 Western Refining 3.89 Energy443 384 UGI 3.87 Energy444 356 Steel Dynamics 3.78 Materials445 210 Loews 3.76 Financials446 273 BB&T Corp. 3.73 Financials447 186 Omnicom Group 3.55 Business Services448 187 DISH Network 3.54 Telecommunications449 217 PBF Energy 3.54 Energy450 238 Bed Bath & Beyond 3.51 Retail451 122 US Foods Holding 3.51 Wholesale452 393 Asbury Automotive Group 3.47 Retail453 83 INTL FCStone 3.46 Financials454 118 Northrop Grumman 3.44 Aerospace & Defense455 421 American Financial Group 3.42 Financials456 487 Booz Allen Hamilton Holding 3.40 Technology457 328 Jarden 3.38 Household Products458 463 Lansing Trade Group 3.29 Wholesale459 374 Casey’s General Stores 3.28 Retail460 344 Franklin Resources 3.26 Financials461 263 Biogen 3.25 Health Care

OWL CYBERSECURITY DARKNET INDEX PAGE 20

OWLCYBER.COM 303-376-6265

Page 21: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

DARKINT Rank

Fortune 500

Rank Company Name

Darknet Index Score Company Sector

462 377 Dover 3.12 Industrials463 142 Southwest Airlines 3.03 Transportation464 39 Johnson & Johnson 2.85 Health Care465 427 Barnes & Noble 2.85 Retail466 462 Amphenol 2.82 Technology467 62 Coca-Cola 2.80 Food, Beverages and Tobacco468 88 General Dynamics 2.69 Aerospace & Defense469 181 Whole Foods Market 2.62 Food and Drug Stores470 234 L Brands 2.59 Retail471 94 Mondelez International 2.58 Food, Beverages and Tobacco472 299 CST Brands 2.50 Retail473 109 McDonald’s 2.38 Hotels, Resturants and Leisure474 431 Zimmer Biomet Holdings 2.35 Health Care475 246 Edison International 2.17 Energy476 232 Ameriprise Financial 2.12 Financials477 477 Essendant 2.12 Wholesale478 445 Delek US Holdings 2.03 Energy479 315 Univar 1.98 Wholesale480 442 Old Republic International 1.96 Financials481 420 Baxalta 1.92 Health Care482 448 Hanesbrands 1.87 Apparel483 167 NGL Energy Partners 1.80 Wholesale484 365 Dick’s Sporting Goods 1.80 Retail485 494 Navient 1.56 Financials486 284 Liberty Interactive 1.39 Technology487 30 Phillips 66 1.34 Energy488 184 Icahn Enterprises 1.34 Financials489 153 Kraft Heinz 1.21 Food, Beverages and Tobacco490 57 Sysco 1.04 Wholesale491 242 Leucadia National 0.82 Food, Beverages and Tobacco492 353 XPO Logistics 0.82 Transportation493 359 Boston Scientific 0.82 Health Care494 426 A-Mark Precious Metals 0.82 Materials495 456 Ingredion 0.82 Food, Beverages and Tobacco496 414 iHeartMedia 0.68 Media497 460 Seaboard 0.58 Food, Beverages and Tobacco498 82 TIAA 0.52 Financials499 123 AbbVie 0.52 Health Care500 145 Kohl’s 0.52 Retail

OWL CYBERSECURITY DARKNET INDEX PAGE 21

OWLCYBER.COM 303-376-6265

Page 22: The OWL Cybersecurity Darknet Index - Squarespace · Introduction The OWL Cybersecurity Darknet Index Reranking the Fortune 500* using Darknet Intelligence (DARKINT) We live in an

OWL CYBERSECURITY DARKNET INDEX PAGE 22

OWLCYBER.COM 303-376-6265

About OWL Cybersecurity

OWL Cybersecurity is based in Denver, Colorado providing darknet threat intelligence data and services to allow companies and organizations to understand and mitigate their own digital risks. OWL Cybersecurity’s data platform allows companies to see in real-time the theft, breach, or other compromise of their proprietary data on the darknet, thus allowing them to both mitigate damage prior to the information being misused and to highlight gaps in their cybersecurity perimeter. This database is believed to be the largest database of darknet content available to commercial users. OWL Cybersecurity complements this with a full range of cybersecurity consulting services, including security assessments, penetration testing, application and code review, incident response, and digital forensics.