Doppelgänger finder: Taking stylometry to the underground

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2014, Pages 212-226

  Afroz, Sadia ^a   Caliskan Islam, Aylin ^b   Stolerman, Ariel ^b   Greenstadt, Rachel ^b   McCoy, Damon ^c  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b DREXEL UNIVERSITY   (United States)

^c GEORGE MASON UNIVERSITY   (United States)

Author keywords

cybercrime; Stylometry; underground forum

Indexed keywords

SECURITY OF DATA;

CYBERCRIME; LABOR INTENSIVE; MANUAL ANALYSIS; MULTIPLE IDENTITIES; SECURITY RESEARCH; STRUCTURED METADATAS; STYLOMETRY; UNDERGROUND FORUM;

COMPUTER CRIME;

EID: 84914140103     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2014.21     Document Type: Conference Paper

References (36)

1. S. Savage, G. M. Voelker, J. Fowler et al., "Beyond technical security: Developing an empirical basis for socio-economic prespectives," http://www.sysnet.ucsd.edu/frontier/proposal.pdf, 2012.
2. A. Narayanan, H. Paskov, N. Gong, J. Bethencourt, E. Stefanov, R. Shin, and D. Song, "On the feasibility of internet-scale author identification," in Proceedings of the 33rd conference on IEEE Symposium on Security and Privacy. IEEE, 2012.
3. D. Kim, M. Motoyama, G. Voelker, and L. Saul, "Topic modeling of freelance job postings to monitor web service abuse," in Proceedings of the 4th ACM workshop on Security and artificial intelligence. ACM, 2011, pp. 11-20.
4. P. Juola, J. Sofko, and P. Brennan, "A prototype for authorship attribution studies," Literary and Linguistic Computing, vol. 21, no. 2, pp. 169-178, 2006.
5. M. Koppel, J. Schler, and S. Argamon, "Computational methods in authorship attribution," Journal of the American Society for Information Science and Technology, vol. 60, no. 1, pp. 9-26, 2009.
6. A. Abbasi and H. Chen, "Writeprints: A stylometric approach to identity-level identification and similarity detection in cyberspace," ACM Trans. Inf. Syst., vol. 26, no. 2, pp. 1-29, 2008.
7. M. Almishari, P. Gasti, G. Tsudik, and E. Oguz, "Privacy-preserving matching of community-contributed content," in Computer Security-ESORICS 2013. Springer, 2013, pp. 443-462.
8. T. Qian and B. Liu, "Identifying multiple userids of the same author," in EMNLP 2013, 2013.
9. J. Franklin, V. Paxson, A. Perrig, and S. Savage, "An inquiry into the nature and causes of the wealth of internet miscreants," in ACM Conference on Computer and Communications Security (CCS), 2007.
10. K. Peretti, "Data breaches: what the underground world of carding reveals," Santa Clara Computer & High Tech. LJ, vol. 25, p. 375, 2008.
11. M. Motoyama, D. McCoy, K. Levchenko, S. Savage, and G. Voelker, "An analysis of underground forums," in Proceedings of the 2011 ACM SIGCOMM conference on Internet measurement conference. ACM, 2011, pp. 71-80.
12. M. Yip, N. Shadbolt, and C. Webber, "Structural analysis of online criminal social networks," in Intelligence and Security Informatics (ISI), 2012 IEEE International Conference on. IEEE, 2012, pp. 60-65.
13. J. Zhuge, T. Holz, C. Song, J. Guo, X. Han, and W. Zou, "Studying malicious websites and the underground economy on the chinese web," Managing Information Risk and the Economics of Security, pp. 225-244, 2009.
14. D. McCoy, A. Pitsillidis, G. Jordan, N. Weaver, C. Kreibich, B. Krebs, G. M. Voelker, S. Savage, and K. Levchenko, "Pharmaleaks: Understanding the business of online pharmaceutical affiliate programs," in Proceedings of the 21st USENIX conference on Security symposium. USENIX Association, 2012, pp. 1-1.
15. K. Thomas, D. McCoy, C. Grier, A. Kolcz, and V. Paxson, "Trafficking fraudulent accounts: the role of the underground market in twitter spam and abuse," in USENIX Security Symposium, 2013.
16. M. Yip, N. Shadbolt, and C. Webber, "Why forums? an empirical analysis into the facilitating factors of carding forums," in ACM Web Science 2013, 2013.
17. S. Afroz, V. Garg, D. McCoy, and R. Greenstadt, "Honor among thieves: A commons analysis of underground forums," in eCrime Researcher's Summit, 2013.
18. P. Chairunnanda, N. Pham, and U. Hengartner, "Privacy: Gone with the typing! identifying web users by their typing patterns," in Privacy, security, risk and trust (passat), 2011 ieee third international conference on and 2011 ieee third international conference on social computing (socialcom). IEEE, 2011, pp. 974-980.
19. P. Eckersley, "How unique is your web browser?" in Privacy Enhancing Technologies. Springer, 2010, pp. 1-18.
20. A. Narayanan and V. Shmatikov, "Robust de-anonymization of large sparse datasets," in IEEE Symposium on Security and Privacy. IEEE, 2008, pp. 111-125.
21. -, "De-anonymizing social networks," in 30th IEEE Symposium on Security and Privacy. IEEE, 2009, pp. 173-187.
22. O. Goga, H. Lei, S. H. K. Parthasarathi, G. Friedland, R. Sommer, T. Renata et al., "Exploiting innocuous activity for correlating users across sites," in WWW'13 Proceedings of the 22nd international conference on World Wide Web, 2013.
23. M. Almishari and G. Tsudik, "Exploring linkability of user reviews," in Computer Security-ESORICS 2012. Springer, 2012, pp. 307-324.
24. J. A. Calandrino, W. Clarkson, and E. W. Felten, "Bubble trouble: Offline de-anonymization of bubble forms." in USENIX Security Symposium, 2011.
25. A. Caliskan and R. Greenstadt, "Translate once, translate twice, translate thrice and attribute: Identifying authors and machine translation tools in translated text," in Semantic Computing (ICSC), 2012 IEEE Sixth International Conference. IEEE, 2012, pp. 121-125.
26. M. Koppel and Y. Winter, "Determining if two documents are by the same author," Journal of the American Society for Information Science and Technology, 2013.
27. D. Perito, C. Castelluccia, M. A. Kaafar, and P. Manils, "How unique and traceable are usernames?" in Privacy Enhancing Technologies. Springer, 2011, pp. 1-17.
28. D. M. Freeman, "Using naive bayes to detect spammy names in social networks," in Proceedings of the 2013 ACM workshop on Artificial intelligence and security. ACM, 2013, pp. 3-12.
29. G. Danezis and P. Mittal, "Sybilinfer: Detecting sybil nodes using social networks." in NDSS, 2009.
30. L. Alvisi, A. Clement, A. Epasto, U. Sapienza, S. Lattanzi, and A. Panconesi, "Sok: The evolution of sybil defense via social networks," in IEEE security and privacy, 2013.
31. K. Toutanova, D. Klein, C. D. Manning, and Y. Singer, "Featurerich part-of-speech tagging with a cyclic dependency network," in Proceedings of the 2003 Conference of the North American Chapter of the Association for Computational Linguistics on Human Language Technology-Volume 1. Association for Computational Linguistics, 2003, pp. 173-180.
32. H. Schmid, "Improvements in part-of-speech tagging with an application to german," in In Proceedings of the ACL SIGDAT-Workshop. Citeseer, 1995.
33. A. W. McDonald, S. Afroz, A. Caliskan, A. Stolerman, and R. Greenstadt, "Use fewer instances of the letter i: Toward writing style anonymization," in Privacy Enhancing Technologies, 2012, pp. 299-318.
34. J. C. Platt, "Sequential minimal optimization: A fast algorithm for training support vector machines," Advances in Kernel Methods Support Vector Learning, vol. 208, no. MSR-TR-98-14, pp. 1-21, 1998.
35. J. Quinlan, "Induction of decision trees," Machine learning, vol. 1, no. 1, pp. 81-106, 1986.
36. M. Brennan, S. Afroz, and R. Greenstadt, "Adversarial stylometry: Circumventing authorship recognition to preserve privacy and anonymity," ACM Transactions on Information and System Security (TISSEC), vol. 15, no. 3, 2012.