Innocent by association: Early recognition of legitimate users

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2012, Pages 353-364

  Xie, Yinglian ^a   Yu, Fang ^a   Ke, Qifa ^a   Abadi, Martín ^a,d   Gillum, Eliot ^b   Vitaldevaria, Krish ^b   Walter, Jason ^b   Huang, Junxian ^c   Mao, Z Morley ^c  

^a MICROSOFT RESEARCH   (United States)

^b MICROSOFT   (United States)

^c UNIVERSITY OF MICHIGAN   (United States)

^d UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Account hijacking; Legitimate user recognition; Social graph; Vouching

Indexed keywords

ACCOUNT HIJACKING; DATA SETS; LEGITIMATE USERS; ON-LINE SERVICE; SOCIAL CONNECTION; SOCIAL GRAPHS; USABILITY AND SECURITY; VOUCHING;

SECURITY OF DATA;

EID: 84869387230     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2382196.2382235     Document Type: Conference Paper

References (34)

1. Cyber-Criminals Shift to Compromised Web Mail Accounts for Spam Delivery. http://www.eweek.com/c/a/Messaging-and-Collaboration/CyberCriminals-Shift-to- Compromised-Web-Mail-Accounts-for-Spam-Delivery-808933/.
2. Inside India's CAPTCHA-Solving Economy. http://blogs.zdnet.com/security/? p=1835.
3. Message Bounced Due to Sending Limit. http://mail.google.com/support/bin/ answer.py?hl=en&answer=22839.
4. New Spammer Tactics-Compromised Accounts Now Favored. http://blog.commtouch.com/cafe/dataand-research/new-spammer-tactics.
5. Rise in Hacked Gmail, Hotmail, and Yahoo Email. http://www.boxaid.com/ word/viruses-and-malware/rise-in-hacked-gmail-hotmailand-yahoo-email.
6. Spammers Using Porn to Break Captchas. http://www.schneier.com/blog/ archives/2007/11/spammers-using.html.
7. Twitter User Reputation Computed from Tweets. http://blog.tagwalk.com/ 2009/11/twitter-user-reputation-computed-from-tweets.
8. Y. Ahn, S. Han, H. Kwak, S. Moon, and H. Jeong. Analysis of Topological Characteristics of Huge Online Social Networking Services. In WWW, 2007.
9. A. Bonato, J. Janssen, and P. Pralat. A Geometric Model for On-line Social Networks. In Workshop on Online Social Networks (WOSN), 2010.
10. Y. Boshmaf, I. Muslukhov, K. Beznosov, and M. Ripeanu. The Socialbot Network: When Bots Socialize for Fame and Money. In Proc. of the 27th Annual Computer Security Applications Conference (ACSAC'11), 2011.
11. P. Boykin and V. P. Roychowdhury. Leveraging Social Networks to Fight Spam. IEEE Computer, 38, 2005.
12. E. Bursztein, S. Bethard, C. Fabry, J. C. Mitchell, and D. Jurafsky. How Good are Humans at Solving CAPTCHAs? A Large Scale Evaluation. In IEEE Syposium of Security and Privacy, 2010.
13. Q. Cao, M. Sirivianos, X. Yang, and T. Pregueiro. Aiding the Detection of Fake Accounts in Large Scale Social Online Services. In NSDI, 2012.
14. P. Chirita, J. Diederich, and W. Nejdl. MailRank: Global Attack-Resistant Whitelists for Spam Detection. In Conference on Information and Knowledge Management (CIKM), 2005.
15. G. Danezis and P. Mittal. SybilInfer: Detecting Sybil Nodes using Social Networks. In NDSS, 2009.
16. J. Douceur. The Sybil Attack. In IPTPS, 2002.
17. J. Golbeck. Computing with Social Trust. Springer, 2008.
18. C. Grier, K. Thomas, V. Paxson, and M. Zhang. @spam: The Underground on 140 Characters or Less. In CCS, 2010.
19. S. Hao, N. A. Syed, N. Feamster, A. G. Gray, and S. Krasser. Detecting Spammers with SNARE: Spatio-temporal Network-level Automatic Reputation Engine. In USENIX Security, 2009.
20. J. Kleinberg. The Small-World Phenomenon: An Algorithmic Perspective. In Proc. 32nd ACM Symposium on Theory of Computing, 2000.
21. A. Mislove, M. Marcon, K. P. Gummadi, P. Druschel, and B. Bhattacharjee. Measurement and Analysis of Online Social Networks. In IMC, 2007.
22. A. Mohaisen, A. Yun, and Y. Kim. Measuring the Mixing Time of Social Graphs. In IMC, 2010.
23. M. Motoyama, K. Levchenko, C. Kanich, D. McCoy, G. M. Voelker, and S. Savage. Re: CAPTCHAs-Understanding CAPTCHA-Solving Services in an Economic Context. In Usenix Security, 2010.
24. A. P. V. Shah and A. Mislove. Bazaar: Strengthening User Reputations in Online Marketplaces. In NSDI, 2011.
25. N. Tran, J. Li, L. Subramanian, and S. S. Chow. Optimal Sybil-resilient Node Admission Control. In Infocom, 2011.
26. N. Tran, B. Min, J. Li, and L. Subramanian. Sybil-Resilient Online Content Voting. In NSDI, 2009.
27. B. Viswanath, K. P. Gummadi, A. Post, and A. Mislove. An Analysis of Social Network-Based Sybil Defenses. In SIGCOMM, 2010.
28. C.Wilson, B. Boe, A. Sala, K. P. N. Puttaswamy, and B. Y. Zhao. User Interactions in Social Networks and their Implications. In EuroSys, 2009.
29. Y. Xie, F. Yu, K. Achan, R. Panigrahy, G. Hulten, and I. Osipkov. Spamming Botnets: Signatures and Characteristics. In SIGCOMM, 2008.
30. Z. Yang, C. Wilson, X. Wang, T. Gao, B. Y. Zhao, and Y. Dai. Uncovering Social Network Sybils in the Wild. In IMC, 2011.
31. H. Yu, P. B. Gibbons, M. Kaminsky, and F. Xiao. SybilLimit: A Near-Optimal Social Network Defense against Sybil Attacks. In IEEE Symposium on Security and Privacy, 2008.
32. H. Yu, M. Kaminsky, P. B. Gibbons, and A. Flaxman. SybilGuard: Defending Against Sybil Attacks via Social Networks. In SIGCOMM, 2006.
33. Y. Yu, M. Isard, D. Fetterly, M. Budiu, U. Erlingsson, P. K. Gunda, and J. Currey. DryadLINQ: A System for General-Purpose Distributed Data-Parallel Computing Using a High-Level Language. In OSDI, 2008.
34. Y. Zhao, Y. Xie, F. Yu, Q. Ke, Y. Yu, Y. Chen, and E. Gillum. BotGraph: Large Scale Spamming Botnet Detection. In NSDI, 2009.