Evilcohort: Detecting communities of malicious accounts on online services

Proceedings of the 24th USENIX Security Symposium

Volumn , Issue , 2015, Pages 563-578

  Stringhini, Gianluca ^a   Mourlanne, Pierre ^b   Jacob, Gregoire ^c   Egele, Manuel ^d   Kruegel, Christopher ^b   Vigna, Giovanni ^b  

^a UNIVERSITY COLLEGE LONDON   (United Kingdom)

^b UNIVERSITY OF CALIFORNIA   (United States)

^c Lastline Inc

^d BOSTON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BOTNET; NETWORK SECURITY;

CYBERCRIMINALS; FINITE NUMBER; IP ADDRESSS; MALICIOUS ACTIVITIES; ON-LINE SERVICE; ON-LINE SOCIAL NETWORKS; SENSITIVE INFORMATIONS; STORAGE SERVICES;

SOCIAL NETWORKING (ONLINE);

EID: 84974703959     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (40)

1. Spamhaus dbl. http://www.spamhaus.org.
2. AIELLO, W., KALMANEK, C., MCDANIEL, P., SEN, S., SPATSCHECK, O., AND VAN DER MERWE, J. Analysis of communities of interest in data networks. In Passive and Active Network Measurement. 2005.
3. BENEVENUTO, F., MAGNO, G., RODRIGUES, T., AND ALMEIDA, V. Detecting Spammers on Twitter. In Conference on Email and Anti-Spam (CEAS) (2010).
4. BENEVENUTO, F., RODRIGUES, T., ALMEIDA, V., ALMEIDA, J., AND GONÇALVES, M. Detecting spammers and content promoters in online video social networks. In ACM SIGIR conference on Research and development in information retrieval (2009).
5. BILGE, L., STRUFE, T., BALZAROTTI, D., AND KIRDA, E. All Your Contacts Are Belong to Us: Automated Identity Theft Attacks on Social Networks. In World Wide Web Conference (WWW) (2009).
6. BLONDEL, V. D., GUILLAUME, J.-L., LAMBIOTTE, R., AND LEFEBVRE, E. Fast unfolding of communities in large networks. Journal of Statistical Mechanics: Theory and Experiment (2008).
7. CAO, Q., YANG, X., YU, J., AND PALOW, C. Uncovering Large Groups of Active Malicious Accounts in Online Social Networks. In ACM Conference on Computer and Communications Security (CCS) (2014).
8. CAO, Y., YEGNESWARAN, V., PORRAS, P., AND CHEN, Y. PathCutter: Severing the Self-Propagation Path of XSS Javascript Worms in Social Web Networks. In Symposium on Network and Distributed System Security (NDSS) (2012).
9. COOKE, E., JAHANIAN, F., AND MCPHERSON, D. The zombie roundup: Understanding, detecting, and disrupting botnets. In Proceedings of the USENIX SRUTI Workshop (2005).
10. DRUCKER, H., WU, D., AND VAPNIK, V. N. Support vector machines for spam categorization. In IEEE transactions on neural networks (1999).
11. EGELE, M., STRINGHINI, G., KRUEGEL, C., AND VI-GNA, G. Compa: Detecting compromised accounts on social networks. In Symposium on Network and Distributed System Security (NDSS) (2013).
12. FARKAS, I. J., DERÉNYI, I., BARABÁSI, A.-L., AND VICSEK, T. Spectra of real-world graphs: Beyond the semicircle law. Physical Review E (2001).
13. GAO, H., CHEN, Y., LEE, K., PALSETIA, D., AND CHOUDHARY, A. Towards Online Spam Filtering in Social Networks. In Symposium on Network and Distributed System Security (NDSS) (2012).
14. GAO, H., HU, J., WILSON, C., LI, Z., CHEN, Y., AND ZHAO, B. Detecting and Characterizing Social Spam Campaigns. In Internet Measurement Conference (IMC) (2010).
15. GRIER, C., THOMAS, K., PAXSON, V., AND ZHANG, M. @spam: the underground on 140 characters or less. In ACM Conference on Computer and Communications Security (CCS) (2010).
16. HAO, S., SYED, N. A., FEAMSTER, N., GRAY, A. G., AND KRASSER, S. Detecting Spammers with SNARE: Spatio-temporal Network-level Automatic Reputation Engine. In USENIX Security Symposium (2009).
17. JACOB, G., KIRDA, E., KRUEGEL, C., AND VIGNA, G. Pubcrawl: protecting users and businesses from crawlers. In USENIX Security Symposium (2012).
18. JAGATIC, T., JOHNSON, N., JAKOBSSON, M., AND JAGATIF, T. Social Phishing. Comm. ACM 50, 10 (2007), 94–100.
19. LEE, K., CAVERLEE, J., AND WEBB, S. Uncovering social spammers: social honeypots + machine learning. In International ACM SIGIR Conference on Research and Development in Information Retrieval (2010).
20. MCDANIEL, P. D., SEN, S., SPATSCHECK, O., VAN DER MERWE, J. E., AIELLO, W., AND KALMANEK, C. R. Enterprise Security: A Community of Interest Based Approach. In Symposium on Network and Distributed System Security (NDSS) (2006).
21. NIU, Y., WANG, Y., CHEN, H., MA, M., AND HSU, F. A Quantitative Study of Forum Spamming Using Context-based Analysys. In Symposium on Network and Distributed System Security (NDSS) (2007).
22. PITSILLIDIS, A., LEVCHENKO, K., KREIBICH, C., KANICH, C., VOELKER, G. M., PAXSON, V., WEAVER, N., AND SAVAGE, S. botnet Judo: Fighting Spam with Itself. In Symposium on Network and Distributed System Security (NDSS) (2010).
23. RAMACHANDRAN, A., DAGON, D., AND FEAMSTER, N. Can DNS-based blacklists keep up with bots? In Conference on Email and Anti-Spam (CEAS) (2006).
24. S. SINHA, M. B., AND JAHANIAN, F. Improving Spam Blacklisting Through Dynamic Thresholding and Speculative Aggregation. In Symposium on Network and Distributed System Security (NDSS) (2010).
25. SAHAMI, M., DUMAIS, S., HECKERMANN, D., AND HORVITZ, E. A Bayesian approach to filtering junk email. Learning for Text Categorization (1998).
26. STONE-GROSS, B., COVA, M., CAVALLARO, L., GILBERT, B., SZYDLOWSKI, M., KEMMERER, R., KRUEGEL, C., AND VIGNA, G. Your Botnet is My Botnet: Analysis of a Botnet Takeover. In ACM Conference on Computer and Communications Security (CCS) (2009).
27. STRINGHINI, G., KRUEGEL, C., AND VIGNA, G. Detecting Spammers on Social Networks. In Annual Computer Security Applications Conference (ACSAC) (2010).
28. TAYLOR, B. Sender reputation in a large webmail service. In Conference on Email and Anti-Spam (CEAS) (2006).
29. THOMAS, K., GRIER, C., MA, J., PAXSON, V., AND SONG, D. Design and Evaluation of a Real-Time URL Spam Filtering Service. In IEEE Symposium on Security and Privacy (2011).
30. THOMAS, K. AND MCCOY, D. AND GRIER, C. AND KOLCZ, A. AND PAXSON, V. Trafficking Fraudulent Accounts: The Role of the Underground Market in Twitter Spam and Abuse. In USENIX Security Symposium (2013).
31. THOMASON, A. Blog Spam: A Review. In Conference on Email and Anti-Spam (CEAS) (2007).
32. WANG, G., KONOLIGE, T., WILSON, C., WANG, X., ZHENG, H., AND ZHAO, B. Y. You are how you click: Clickstream analysis for sybil detection. USENIX Security Symposium (2013).
33. WANG, G., WILSON, C., ZHAO, X., ZHU, Y., MOHANLAL, M., ZHENG, H., AND ZHAO, B. Y. Serf and turf: crowdturfing for fun and profit. In World Wide Web Conference (WWW) (2012).
34. XIE, Y., YU, F., ACHAN, K., PANIGRAHY, R., HUL-TEN, G., AND OSIPKOV, I. Spamming Botnets: Signatures and Characteristics. SIGCOMM Comput. Commun. Rev. (2008).
35. XU, W., ZHANG, F., AND ZHU, S. Toward worm detection in online social networks. In Annual Computer Security Applications Conference (ACSAC) (2010).
36. YANG, C., HARKREADER, R., AND GU, G. Die Free or Live Hard? Empirical Evaluation and New Design for Fighting Evolving Twitter Spammers. In Symposium on Recent Advances in Intrusion Detection (RAID) (2011).
37. YU, H., KAMINSKY, M., GIBBONS, P. B., AND FLAX-MAN, A. Sybilguard: defending against sybil attacks via social networks. ACM SIGCOMM Computer Communication Review (2006).
38. ZHANG, C. M., AND PAXSON, V. Detecting and Analyzing Automated Activity on Twitter. In Passive and Active Measurement Conference (2011).
39. ZHAO, Y., XIE, Y., YU, F., KE, Q., YU, Y., CHEN, Y., AND GILLUM, E. Botgraph: Large scale spamming botnet detection. In USENIX Symposium on Networked Systems Design and Implementation (NSDI) (2009).
40. ZHONG, Z., HUANG, K., AND LI, K. Throttling Outgoing SPAM for Webmail Services. In Conference on Email and Anti-Spam (CEAS) (2005).