Privacy leakage of location sharing in mobile social networks: Attacks and defense

IEEE Transactions on Dependable and Secure Computing

Volumn 15, Issue 4, 2018, Pages 646-660

  Li, Huaxin ^a   Zhu, Haojin ^a   Du, Suguo ^b   Liang, Xiaohui ^c   Shen, Xuemin Sherman ^d  

^a SHANGHAI JIAO TONG UNIVERSITY   (China)

^b Shanghai Jiao Tong University   (China)

^c UNIVERSITY OF MASSACHUSETTS BOSTON   (United States)

^d UNIVERSITY OF WATERLOO   (Canada)

Author keywords

Location privacy; mobile social networks; privacy protection

Indexed keywords

LARGE DATASET; POPULATION STATISTICS; SOCIAL NETWORKING (ONLINE);

EFFECTIVENESS AND EFFICIENCIES; LOCATION PRIVACY; MOBILE SOCIAL NETWORK (MSNS); MOBILE SOCIAL NETWORKS; POINTS OF INTEREST; PRIVACY PREFERENCES; PRIVACY PROTECTION; REAL WORLD EXPERIMENT;

LOCATION;

EID: 85050383382     PISSN: 15455971     EISSN: 19410018     Source Type: Journal    
DOI: 10.1109/TDSC.2016.2604383     Document Type: Article

References (50)

1. C. Smith, "How many people use the top social media, apps & services?" (2014). [Online]. Available: http://expandedramblings. com/ index. php/resource-how-many-people-use-the-top-social-media/
2. K. P. Tang, J. Lin, J. I. Hong, D. P. Siewiorek, and N. Sadeh, "Rethinking location sharing: Exploring the implications of socialdriven versus purpose-driven location sharing, " in Proc. 12th ACM Int. Conf. Ubiquitous Comput., 2010, pp. 85-94.
3. T. Xiang. (2014). [Online]. Available: http://technode. com
4. Apk Apps, "Skout 3. 4. 3 Apk Meet, Chat, Friend, " (2014). [Online]. Available: http://www. apk4. net/applications/social-applications/ skout-3-4-3-apk-meet-chat-friend
5. H. Feng and K. G. Shin, "POSTER: Positioning attack on proximity-based people discovery, " in Proc. ACM SIGSAC Conf. Comput. Commun. Secur., 2014, pp. 1427-1429.
6. Y. Ding, S. T. Peddinti, and K. W. Ross, "Stalking Beijing from Timbuktu: A generic measurement approach for exploiting location-based social discovery, " in Proc. 4th ACM Workshop Secur. Privacy Smartphones Mobile Devices, 2015, pp. 75-80.
7. M. Li, et al., "All your location are belong to us: Breaking mobile social networks for automated user location tracking, " in Proc. 15th ACM Int. Symp. Mobile Ad Hoc Netw. Comput., 2014, pp. 43-52.
8. I. Polakis, G. Argyros, T. Petsios, S. Sivakorn, and A. D. Keromytis, "Where's wally?: Precise user discovery attacks in location proximity services, " in Proc. 22nd ACM SIGSAC Conf. Comput. Commun. Secur., 2015, pp. 817-828.
9. R. Yu, J. Kang, X. Huang, S. Xie, Y. Zhang, and S. Gjessing, "MixGroup: Accumulative pseudonym exchanging for location privacy enhancement in vehicular social networks, " IEEE Trans. Depend. Sec. Comput., vol. 13, no. 1, pp. 93-105, Jan. /Feb. 2016.
10. S. Li, H. Zhu, Z. Gao, X. Guan, K. Xing, and X. Shen, "Location privacy preservation in collaborative spectrum sensing, " in Proc. IEEE INFOCOM, 2012, pp. 729-737.
11. M. Srivatsa and M. Hicks, "Deanonymizing mobility traces: Using social network as a side-channel, " in Proc. ACM Conf. Comput. Commun. Secur., 2012, pp. 628-637.
12. M. Tiwari, P. Mohan, A. Osheroff, and H. Alkaff, "Context-centric security, " in Proc. 7th USENIX Conf. Hot Topics Secur., 2012, p. 9.
13. S. Landau, "Control use of data to protect privacy, " Science, vol. 347, no. 6221, pp. 504-406, 2015.
14. A. Acquisti, L. Brandimarte, and G. Loewenstein, "Privacy and human behavior in the age of information, " Science, vol. 347, no. 6621, pp. 509-514, 2015.
15. Z. Zhang, et al., "On the validity of geosocial mobility traces, " in Proc. 12th ACM Workshop Hot Topics Netw., 2013, Art. no. 11.
16. R. Shokri, G. Theodorakopoulos, J. Le Boudec, and J. Hubaux, "Quantifying location privacy, " in Proc. IEEE Symp. Secur. Privacy, 2011, pp. 247-262.
17. X. Chen, J. Pang, and R. Xue, "Constructing and comparing user mobility profiles for location-based services, " in Proc. 28th Annu. ACM Symp. Appl. Comput., 2013, pp. 261-266.
18. Y. De Mulder, G. Danezis, L. Batina, and B. Preneel, "Identification via location-profiling in GSM networks, " in Proc. 7th ACM Workshop Privacy Electron. Soc., 2008, pp. 23-32.
19. H. Zang and J. Bolot, "Anonymization of location data does not work: A large-scale measurement study, " in Proc. 17th Annu. Int. Conf. Mobile Comput. Netw., 2011, pp. 145-156.
20. T. M. Cover and J. A. Thomas, Elements of Information Theory, Hoboken, NJ, USA: Wiley, 1991.
21. C. Song, Z. Qu, N. Blumm, and A.-L. Barabasi, "Limits of predictability in human mobility, " Science, vol. 327, no. 5968, pp. 1018-1021, 2010.
22. M. Ye, D. Shou, W.-C. Lee, P. Yin, and K. Janowicz, "On the semantic annotation of places in location-based social networks, " in Proc. 17th ACM SIGKDD Int. Conf. Knowl. Discovery Data Mining, 2011, pp. 520-528.
23. Y. Chon, N. D. Lane, F. Li, H. Cha, and F. Zhao, "Automatically characterizing places with opportunistic crowdsensing using smartphones, " in Proc. ACM Conf. Ubiquitous Comput., 2012, pp. 481-490.
24. D. Gusfield, Algorithms on Strings, Trees and Sequences: Computer Science and Computational Biology, Cambridge, U. K.: Cambridge Univ. Press, 1997.
25. Q. Li, Y. Zheng, X. Xie, Y. Chen, W. Liu, and W. Ma, "Mining user similarity based on location history, " in Proc. 16th ACM SIGSPATIAL Int. Conf. Advances Geographic Inf. Syst., 2008, Art. no. 34.
26. A. Chaabane, G. Acs, and M. A. Kaafar, "You are what you like! information leakage through users' interests, " in Proc. Annu. Netw. Distrib. Syst. Secur. Symp., 2012.
27. Scikit-learn: Machine learning in python. (2015). [Online]. Available: http://scikit-learn. org/stable/
28. W. Y. Loh, "Classification and regression trees, " Wiley Interdisciplinary Rev. Data Mining Knowl. Discovery, vol. 1, pp. 14-23, 2011.
29. C. A. Ardagna, M. Cremonini, S. De Capitani di Vimercati, and P. Samarati, "An obfuscation-based approach for protecting location privacy, " IEEE Trans. Depend. Sec. Comput., vol. 8, no. 1, pp. 13-27, Jan. /Feb. 2011.
30. N. E. Bordenabe, K. Chatzikokolakis, and C. Palamidessi, "Optimal geo-indistinguishable mechanisms for location privacy, " in Proc. ACM SIGSAC Conf. Comput. Commun. Secur., 2014, pp. 251-262.
31. J. Kang, R. Yu, X. Huang, H. Bogucka, S. Gjessing, and Y. Zhang, "Location privacy attack and defense in cloud-enabled internet of vehicles, " IEEE Wireless Commun. Mag., 2016.
32. Z. Yang, P. Cheng, and J. Chen, "Learning-based jamming attack against low-duty-cycle networks, " IEEE Trans. Depend. Sec. Comput., vol. PP, no. 99, p. 1, Nov. 2015, Doi: 10. 1109/TDSC. 2015. 2501288.
33. H. Zhang, P. Cheng, L. Shi, and J. Chen, "Optimal DoS attack scheduling in wireless networked control system, " IEEE Trans. Control Syst. Technol., vol. 24, no. 3, pp. 843-852, May 2016.
34. X. Zhang, Y. Zhang, R. Yu, W. Wang, and M. Guizani, "Enhancing spectral-energy efficiency for LTE-advanced heterogeneous networks: A users social pattern perspective, " IEEE Wireless Commun., vol. 21, no. 2, pp. 10-17, Apr. 2014.
35. G. Nan, et al., "Distributed resource allocation in cloud-based wireless multimedia social networks, " IEEE Netw. Mag., vol. 28, no. 4, pp. 74-80, Jul. /Aug. 2014.
36. G. Nan, Z. Mao, M. Yu, M. Li, H. Wang, and Y. Zhang, "Stackelberg game for bandwidth allocation in cloud-based wireless live-streaming social networks, " IEEE Syst. J., vol. 8, no. 1, pp. 256-267, Mar. 2014.
37. S. Lai, H. Li, H. Zhu, and N. Ruan, "De-anonymizing social networks: Using user interest as a side-channel, " in Proc. IEEE/CIC Int. Conf. Commun. China, 2015, pp. 1-5.
38. K. Zhang, X. Liang, R. Lu, K. Yang, and X. Shen, "Exploiting mobile social behaviors for Sybil detection, " in Proc. IEEE Conf. Comput. Commun., 2015, pp. 271-279.
39. K. Zhang, X. Liang, X. Shen, and R. Lu, "Exploiting multimedia services in mobile social networks from security and privacy perspectives, " IEEE Commun. Mag., vol. 52, no. 3, pp. 58-65, Mar. 2014.
40. H. Li, Z. Xu, H. Zhu, D. Ma, S. Li, and K. Xing, "Demographics inference through Wi-Fi network traffic analysis, " in Proc. 35th Annu. IEEE Int. Conf. Comput. Commun., 2016, pp. 1-9.
41. A. Narayanan, N. Thiagarajan, M. Hamburg, M. Lakhani, and D. Boneh, "Location privacy via private proximity testing, " in Proc. 18th Annu. Netw. Distrib. Syst. Secur. Symp., 2011.
42. R. Shokri, G. Theodorakopoulos, C. Troncoso, J.-P. Hubaux, and J.-Y. Le Boudec, "Protecting location privacy: Optimal strategy against localization attacks, " in Proc. ACM Conf. Comput. Commun. Secur., 2012, pp. 617-627.
43. M. Herrmann, A. Rial, C. Diaz, and B. Preneel, "Practical privacypreserving location-sharing based services with aggregate statistics, " in Proc. ACM Conf. Secur. Privacy Wireless Mobile Netw., 2014, pp. 87-98.
44. Q. Xiao, et al., "POSTER: LocMask: A location privacy protection framework in android system, " in Proc. ACM Conf. Comput. Commun. Secur., 2014, pp. 1526-1528.
45. M. Gruteser and D. Grunwald, "Anonymous usage of locationbased services through spatial and temporal cloaking, " in Proc. 1st Int. Conf. Mobile Syst. Appl. Services, 2003, pp. 31-42.
46. B. Hoh, M. Gruteser, H. Xiong, and A. Alrabady, "Preserving privacy in GPS traces via uncertainty-aware path cloaking, " in Proc. 14th ACM Conf. Comput. Commun. Secur., 2007, pp. 161-171.
47. A. R. Beresford, A. Rice, N. Skehin, and R. Sohan, "MockDroid: Trading privacy for application functionality on smartphones, " in Proc. 12th Workshop Mobile Comput. Syst. Appl., 2011, pp. 49-54.
48. K. Fawaz and K. G. Shin, "Location privacy protection for smartphone users, " in Proc. ACM SIGSAC Conf. Comput. Commun. Secur., 2014, pp. 239-250.
49. L. Li, X. Zhao, and G. Xue, "Unobservable Re-authentication for smartphones, " in Proc. 20th Annu. Netw. Distrib. Syst. Secur. Symp., 2013.
50. X. Wang, K. Sun, Y. Wang, and J. Jing, "DeepDroid: Dynamically enforcing enterprise policy on android devices, " in Proc. Annu. Netw. Distrib. Syst. Secur. Symp., 2015.