Abstract:Malicious accounts are one of the biggest threats to the security and privacy of online social networks (OSNs). In this work, we study a new type of OSN, called privacy-centric mobile social network (PC-MSN), such as KakaoTalk and LINE, which has attracted billions of users recently. The design of PC-MSN is inspired to protect their users' privacy from strangers: (1) a stranger is not easy to send a friend request to a user who does not want to make friends with strangers; and (2) strangers cannot view a user's post. Such a design mitigates the security issue of malicious accounts. At the same time, it also brings the battleground between attackers and defenders to an earlier stage, i.e., making friendship, than the one studied in previous works. Also, previous defense proposals mostly rely on certain assumptions on the attacker, which may not be robust in the new PC-MSNs. As a result, previous malicious accounts detection approaches are less effective on a PC-MSN. To mitigate this issue, we study the patterns in friend requests to distinguish malicious accounts, and perform a systematic study over 1 million labeled data from WLink, a real PC-MSN with billions of users, to confirm our hypothesis. Based on the results, we propose dozens of new features and leverage machine learning to detect malicious accounts. We evaluate our method and compare it with existing methods, and the results show that our method achieves a precision of 99.5% and a recall of 98.4%, which significantly outperform previous state-of-the-art methods. Importantly, we qualitatively analyze the robustness of the designed features, and our evaluation shows that using only robust features can achieve the same level of performance as using all features. WLink has deployed our detection method. Our method can detect 0.59 million malicious accounts daily, which is 6 times higher than the previous deployment on WLink, with a precision of over 90%.

A Collaborative Defending Scheme Based on Social Computing Against IM Malicious Codes

Collaborative Defending Scheme Against Malicious Web Pages Based on Social Trust

Malice detection and prevention mechanism in social P2P networks

Network Safeguard System Based on IDXP

Patching by Automatically Tending to Hub Nodes Based on Social Trust

Automatic Patching Based on Social Computing in P2P Network

An Efficient Recovery and Survival Scheme against Malware Attacks

SMCD: Privacy-preserving Deep Learning Based Malicious Code Detection

VoteTrust: Leveraging Friend Invitation Graph to Defend Against Social Network Sybils

Thank You for Being A Friend: an Attacker View on Online-Social-Network-Based Sybil Defenses.

A Defence Scheme Against Identity Theft Attack Based on Multiple Social Networks

A Method for Detecting and Blocking Instant Messaging Software

Defense Against Malicious URL Spreading in Micro-Blog Network with Hub Nodes

Distributed intelligent intrusion prevention scheme based on reputation and consensus

Characterizing and Detecting Malicious Accounts in Privacy-Centric Mobile Social Networks: A Case Study

Suppression of Malicious Code Propagation in Software-Defined Networking

An Investigation on Instant Messaging Worm Based on Complex Network Theory

Normal User Community Incoming links-1-1 1 Sybil Community Out-going links

Reliable Object Rating Framework for Content Sharing System

Attack-Resistant Collaboration in Wireless Video Streaming Social Networks

A Malicious Users Detecting Model Based on Feedback Correlations