Reverse social engineering attacks in online social networks

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6739 LNCS, Issue , 2011, Pages 55-74

  Irani, Danesh ^a   Balduzzi, Marco ^b   Balzarotti, Davide ^b   Kirda, Engin ^c   Pu, Calton ^a  

^a Georgia Institute of Technology   (United States)

^b EURECOM   (France)

^c NORTHEASTERN UNIVERSITY   (United States)

Author keywords

privacy; social engineering; social networks

Indexed keywords

AMOUNT OF INFORMATION; FACEBOOK; HIGHER-DEGREE; KEY FEATURE; ON-LINE SERVICE; ONLINE SOCIAL NETWORKS; SECURITY AND PRIVACY; SOCIAL ENGINEERING; SOCIAL NETWORKS; USER STUDY;

COMPUTER CRIME; ENGINEERING; INTERNET;

SOCIAL NETWORKING (ONLINE);

EID: 79959930140     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-22424-9_4     Document Type: Conference Paper

References (19)

1. Sophos Facebook ID Probe (2008), http://www.sophos.com/pressoffice/news/ articles/2007/08/facebook.html
2. Facebook Statistics (2010), http://www.facebook.com/press/info.php? statistics
3. Sophos Security Threat 2010 (2010), http://www.sophos.com/sophos/docs/ eng/papers/sophos-security-threat-report-jan-2010-wpna.pdf
4. Balduzzi, M., Platzer, C., Holz, T., Kirda, E., Balzarotti, D., Kruegel, C.: Abusing Social Networks for Automated User Profiling. In: Jha, S., Sommer, R., Kreibich, C. (eds.) RAID 2010. LNCS, vol. 6307, pp. 422-441. Springer, Heidelberg (2010)
5. Bilge, L., Strufe, T., Balzarotti, D., Kirda, E.: All Your Contacts Are Belong to Us: Automated Identity Theft Attacks on Social Networks. In: 18th International Conference on World Wide Web, WWW (2009)
6. Douceur, J.R.: The sybil attack. In: Druschel, P., Kaashoek, M.F., Rowstron, A. (eds.) IPTPS 2002. LNCS, vol. 2429, p. 251. Springer, Heidelberg (2002)
7. Flaxman, A.: Expansion and lack thereof in randomly perturbed graphs. Internet Mathematics 4(2), 131-147 (2007)
8. Irani, D., Webb, S., Giffin, J., Pu, C.: Evolutionary study of phishing. In: eCrime Researchers Summit, pp. 1-10. IEEE, Los Alamitos (2008)
9. Irani, D., Webb, S., Pu, C., Li, K.: Study of Trend-Stuffing on Twitter through Text Classification. In: Collaboration, Electronic messaging, Anti-Abuse and Spam Conference, CEAS (2010)
10. Jagatic, T.N., Johnson, N.A., Jakobsson, M., Menczer, F.: Social phishing. Commun. ACM 50(10), 94-100 (2007)
11. Jakobsson, M., Finn, P., Johnson, N.: Why and How to Perform Fraud Experiments. IEEE Security & Privacy 6(2), 66-68 (2008)
12. Jakobsson, M., Ratkiewicz, J.: Designing ethical phishing experiments: a study of (ROT13) rOnl query features. In: 15th International Conference on World Wide Web, WWW (2006)
13. Lauinger, T., Pankakoski, V., Balzarotti, D., Kirda, E.: Honeybot, your man in the middle for automated social engineering. In: LEET 2010, 3rd USENIX Workshop on Large-Scale Exploits and Emergent Threats, San Jose (2010)
14. Mitnick, K., Simon, W.L., Wozniak, S.: The Art of Deception: Controlling the Human Element of Security. Wiley, Chichester (2002)
15. Porter, M.: An algorithm for suffix stripping. Program 14(3), 130-137 (1980)
16. Stringhini, G., Kruegel, C., Vigna, G.: Detecting Spammers on Social Networks. In: Annual Computer Security Applications Conference, ACSAC (2010)
17. Webb, S., Caverlee, J., Pu, C.: Social Honeypots: Making Friends with a Spammer Near You. In: Conference on Email and Anti-Spam, CEAS (2008)
18. Yu, H., Kaminsky, M., Gibbons, P., F.: Sybilguard: defending against sybil attacks via social networks. In: Proceedings of the 2006 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, pp. 267-278. ACM, New York (2006)
19. Yu, H., Kaminsky, M., Gibbons, P. B., Flaxman, A.: SybilLimit: A Near-Optimal Social Network Defense against Sybil Attacks. In: IEEE Symposium on Security and Privacy (2008)