Conclusion

The present research has both theoretical and operational value: based on link analysis and user surfing behavior, it is possible to derive probabilities of where an user is likely to land next (in the Markovian sense). An evolutionary, algorithmic inferential network, helps to reveal user exposures, overcoming the limitations of the short life spans of TOR structures and helping identify potential points of intervention, to limit the extent of the damage that bad practices carry when novices acquire and exploit the knowledge of criminal practices.  
The present method can be used to study in more detail other types of behavioral. For instance, people use certain apps such as VPNs at certain times of the day, and the algorithmic complexity can be measured to answer questions such as: what are their demographics, what other apps they use, what marketing tricks are used to convert those novices? This also extends to mobile sensors (apps), which might be a more suitable platform for early stage acquisition.