Understanding the behavior of malicious applications in social networks

IEEE Network

Volumn 24, Issue 5, 2010, Pages 14-19

  Makridakis, Andreas ^a   Athanasopoulos, Elias ^a   Antonatos, Spiros ^a   Antoniades, Demetres ^a   Ioannidis, Sotiris ^a   Markatos, Evangelos ^a  

^a NONE

Author keywords

[No Author keywords available]

Indexed keywords

DDOS ATTACK; DISTRIBUTED SYSTEMS; FACEBOOK; HTML PAGES; HTML TAGS; ILLEGAL ACTIVITIES; JAVA APPLETS; JAVASCRIPT; MALWARE PROPAGATION; NETWORK ATTACK; ONLINE SOCIAL NETWORKINGS; PRIVACY VIOLATION; SIDE EFFECT; SOCIAL NETWORKING; SOCIAL NETWORKS; WEB 2.0 APPLICATIONS; WEB CONTROL;

COMPUTER CRIME; HTML; WORLD WIDE WEB;

SOCIAL NETWORKING (ONLINE);

EID: 77956971916     PISSN: 08908044     EISSN: None     Source Type: Journal    
DOI: 10.1109/MNET.2010.5578913     Document Type: Article

References (39)

1. D. Boyd and N. B. Ellison, Social Network Sites: Definition, History, and Scholarship, J. Computer-Mediated Commun., vol.13, no.1, 2007.
2. S. Utz, The (Potential) Benefits of Campaigning via Social Network Sites, J. Computer-Mediated Commun., vol.14, no.2, 2009, pp. 221-243
3. M. J. Kushin and K. Kitchener, Getting Political on Social Network Sites: Exploring Online Political Discourse on Facebook, Annual Convention of the Western States Commun. Assn., Phoenix, AZ, 2009.
4. LinkedIn - Relationships Matter, http://www.linkedin.com
5. XING - Social Network for Business Professionals, http://www.xing.com
6. Facebook - Connect and share with the people in your life; http://www.facebook.com
7. MySpace, http://www.myspace.com
8. Orkut, http://www.orkut.com
9. Facebook Developers, http://www.facebook.com/developers
10. Facebook Markup Language (FBML), http://wiki.developers.facebook.com/ index.php/FBML
11. Facebook Query Language (FQL), http://wiki.developers.facebook.com/index. php/FQL
12. Facebook JavaScript (FBJS), http://wiki.developers.facebook.com/index. php/FBJS
13. Facebook API, http://wiki.developers.facebook.com/index.php/API
14. Photo of the Day, http://www.facebook.com/apps/application.php?id= 8752912084
15. Lucky Art, http://www.facebook.com/apps/application.php?id=49562151481
16. Key and Certificate Management Tool http://java.sun.com/j2se/1.5.0/docs/ tooldocs/solaris/keytool.html
17. Friendster, http://www.friendster.com
18. OpenSocial, http://www.opensocial.org
19. Friendster Developers Platform, http://www.friendster.com/developer/ index.php/type=fbopen
20. A. Felt and D. Evans, Privacy Protection for Social Networking Platforms, Web 2.0 Security and Privacy, 2008.
21. E. Athanasopoulos et al., Antisocial Networks: Turning a Social Network into a Botnet, ISC 08, Proc. 11th Intl. Conf. Info. Sec., Berlin, Heidelberg, 2008, Springer-Verlag, pp. 146-160
22. A. Mislove et al., Measurement and Analysis of Online Social Networks, IMC07, Proc. 7th ACM SIGCOMM Conf. Internet Measurement, New York, NY, 2007, pp. 29-42.
23. Y.-Y. Ahn et al., Analysis of Topological Characteristics of Huge Online Social Networking Services, WWW 07: Proc. 16th Intl. Conf. World Wide Web, New York, NY, 2007, ACM, pp. 835-844
24. L. Backstrom et al., Group Formation in Large Social Networks: Membership, Growth, and Evolution, KDD 06, Proc.12th ACM SIGKDD Intl. Conf. Knowledge Discovery and Data Mining, New York, NY, 2006, pp 44-54.
25. World: Hackers Crash the Social Networking Party, 2006, http://www.pcworld.com/article/127347
26. MySpace XSS QuickTime Worm, 2006, http://securitylabs.websense.com/ content/Alerts/1319.aspx
27. V. T. Lam et al., Puppetnets: Misusing Web Browsers as a Distributed Attack Infrastructure, CCS06: Proc. 13th ACM Conf. Comp. and Commun. Sec., New York, NY, 2006, pp. 221-234
28. T. N. Jagatic et al., Social Phishing, Commun. ACM, vol.50, no.10, 2007, pp. 94-100.
29. G. Hogben, Security Issues and Recommendations for Online Social Networks, tech. rep., ENISA, Oct. 2007.
30. G. Brown et al., Social Networks and Context-Aware Spam, CSCW 08: Proc. ACM 2008 Conf. Comp. Supported Cooperative Work, New York, NY, 2008, pp. 403-412
31. R. Dhamija, J. D. Tygar, and M. Hearst, Why Phishing Works, CHI 06, Proc. SIGCHI Conf. Human Factors in Computing Dystems, New York, NY, 2006, pp. 581-590
32. R. Gross, A. Acquisti, and H. J. Heinz, III, Information Revelation and Privacy in Online Social Networks, WPES05: Proc. 2005 ACM Wksp. Privacy in the Electronic Society, New York, NY, 2005, pp. 71-80.
33. L. Bilge et al., All Your Contacts Are Belong to Us: Automated Identity Theft Attacks on Social Networks, WWW 09, Proc. 18th Intl. Conf. World Wide Web, New York, NY, 2009, pp. 551-560
34. BBC News: Identity at risk on Facebook, 2008; http://news.bbc.co.uk/ 2/hi/programmes/click-online/7375772.stm
35. J. Bonneau, J. Anderson, and G. Danezis, Prying Data out of a Social Network, Advances in Social Networks Analysis and Mining, July 2009.
36. J. Bonneau et al., Eight Friends Are Enough: Social Graph Approximation via Public Listings, SNS09: Proc. 2nd EuroSys Wksp. Social Network Sys., New York, NY, 2009, pp. 13-18.
37. Facebook ID theft targets friends, 2009, http://redtape.msnbc.com/2009/ 01/post-1.html
38. A. Felt, Defacing Facebook: A Security Case Study, 2007, http://www.cs.virginia.edu/felt/fbook/facebook-xss.pdf
39. B. E. Ur and V. Ganapathy, Evaluating Attack Amplification in Online Social Networks, W2SP 09: 2009 Web 2.0 Security and Privacy Wksp., Oakland, CA, May 2009.