Who on Earth is "Mr. Cypher": Automated friend injection attacks on social networking sites

IFIP Advances in Information and Communication Technology

Volumn 330, Issue , 2010, Pages 80-89

  Huber, Markus ^a   Mulazzani, Martin ^a   Weippl, Edgar ^a  

^a SBA Research Sommerpalais Harrach   (Austria)

Author keywords

infiltration; privacy; social networks

Indexed keywords

DATA PRIVACY; INFILTRATION; SOCIAL NETWORKING (ONLINE);

ACTIVE EAVESDROPPING; SOCIAL NETWORKING SITES; WIRELESS ACCESS POINTS;

NETWORK SECURITY;

EID: 84857402104     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-15257-3_8     Document Type: Conference Paper

References (18)

1. Facebook. Facebook statistics (2010), http://www.facebook.com/press/info.php? statistics (Online; accessed 5-January-2010)
2. Gross, R., Acquisti, A.: Information revelation and privacy in online social networks (the Facebook case). In: Proceedings of the 2005 ACM workshop on Privacy in the electronic society, pp. 71-80 (2005)
3. Jones, H., Soltren, J.H.: Facebook: Threats to Privacy. Project MAC: MIT Project on Mathematics and Computing (2005)
4. Bonneau, J., Anderson, J., Anderson, R., Stajano, F.: Eight friends are enough: social graph approximation via public listings. In: Proceedings of the Second ACM Euro Sys Workshop on Social Network Systems, pp. 13-18. ACM, New York (2009)
5. Bilge, L., Strufe, T., Balzarotti, D., Kirda, E.: All your contacts are belong to us: Automated identity theft attacks on social networks. In: 18th International World Wide Web Conference (April 2009)
6. Jagatic, T.N., Johnson, N.A., Jakobsson, M., Menczer, F.: Social phishing. Communications of the ACM 50(10), 94-100 (2007)
7. Brown, G., Howe, T., Ihbe, M., Prakash, A., Borders, K.: Social networks and context-aware spam. In: Proceedings of the ACM 2008 conference on Computer supported cooperative work, pp. 403-412. ACM, New York (2008)
8. Huber, M., Kowalski, S., Nohlberg, M., Tjoa, S.: Towards automating social engineering using social networking sites. In: IEEE International Conference on Computational Science and Engineering, vol. 3, pp. 117-124 (2009)
9. He, X.: A Performance Analysis of Secure HTTP Protocol. STAR Lab Technical Report, Department of Electrical and Computer Engineering, Tennessee Tech University (2003)
10. Wikipedia. List of social networking websites-Wikipedia, The Free Encyclopedia (2009), http://en.wikipedia.org/wiki/List_of_social_networking_websites
11. Dwyer, C., Hiltz, S.R., Passerini, K.: Trust and privacy concern within social networking sites: A comparison of Facebook and My Space. In: Americas Conference on Information Systems (AMCIS), Keystone, Colorado, USA (2007)
12. Facebook. Facebook asks more than 350 million users around the world to personalize their privacy (2009), http://www.facebook.com/press/releases.php?p=133917 (Online accessed March 4, 2010)
13. Felt, A., Evans, D.: Privacy protection for social networking APIs. In: 2008 Web 2.0 Security and Privacy, W2SP 2008 (2008)
14. Alexa. Site info: Facebook (2010), http://www.alexa.com/siteinfo/facebook.com# trafficstats (Online accessed January 20, 2010) dpkt-python packet creation/parsing library, http://code.google.com/p/dpkt/
15. Python mechanize library, http://wwwsearch.sourceforge.net/mechanize/
16. Adida, B.: Sessionlock: securing web sessions against eavesdropping. In: Proceeding of the 17th international conference on World Wide Web, pp. 517-524. ACM, New York (2008)
17. Xing business network-social network for business professionals, https://www.xing. com/
18. Jackson, C., Barth, A.: Force HTTPS: Protecting high-security web sites from network attacks. In: Proceeding of the 17th international conference on World Wide Web, pp. 525-534. ACM, New York (2008)