Abstract:Malicious accounts are one of the biggest threats to the security and privacy of online social networks (OSNs). In this work, we study a new type of OSN, called privacy-centric mobile social network (PC-MSN), such as KakaoTalk and LINE, which has attracted billions of users recently. The design of PC-MSN is inspired to protect their users' privacy from strangers: (1) a stranger is not easy to send a friend request to a user who does not want to make friends with strangers; and (2) strangers cannot view a user's post. Such a design mitigates the security issue of malicious accounts. At the same time, it also brings the battleground between attackers and defenders to an earlier stage, i.e., making friendship, than the one studied in previous works. Also, previous defense proposals mostly rely on certain assumptions on the attacker, which may not be robust in the new PC-MSNs. As a result, previous malicious accounts detection approaches are less effective on a PC-MSN. To mitigate this issue, we study the patterns in friend requests to distinguish malicious accounts, and perform a systematic study over 1 million labeled data from WLink, a real PC-MSN with billions of users, to confirm our hypothesis. Based on the results, we propose dozens of new features and leverage machine learning to detect malicious accounts. We evaluate our method and compare it with existing methods, and the results show that our method achieves a precision of 99.5% and a recall of 98.4%, which significantly outperform previous state-of-the-art methods. Importantly, we qualitatively analyze the robustness of the designed features, and our evaluation shows that using only robust features can achieve the same level of performance as using all features. WLink has deployed our detection method. Our method can detect 0.59 million malicious accounts daily, which is 6 times higher than the previous deployment on WLink, with a precision of over 90%.

Sniper: Social-Link Defense for Network Coordinate Systems

Sniper: A Social Relationship Based Defence for Network Coordinate Systems

SLINCS: A Social Link Based Evaluation System for Network Coordinate Systems

SND: Secure Neighbor Discovery for 60 GHz Network with Directional Antenna

Hiding and Trapping: A Deceptive Approach for Defending against Network Reconnaissance with Software-Defined Network

SALS: semantics-aware location sharing based on cloaking zone in mobile social networks.

NCShield: Securing Decentralized, Matrix Factorization-Based Network Coordinate Systems

Network Attack-Defense Simulation Training System Based on HLA

A Low-cost, High-impact Node Injection Approach for Attacking Social Network Alignment

A Security Mechanism for Cluster-Based WSN against Selective Forwarding.

Privacy Preserving Asynchronous Localization with Attack Detection and Ray Compensation

An AI-Powered Network Threat Detection System

Characterizing and Detecting Malicious Accounts in Privacy-Centric Mobile Social Networks: A Case Study

A Novel Secure Localization Approach in Wireless Sensor Networks

Leveraging Social Networks to Detect Anomalous Insider Actions in Collaborative Environments

A Collaborative Defending Scheme Based on Social Computing Against IM Malicious Codes

Software Defined Network Inference With Passive/Active Evolutionary-Optimal Probing (Sniper)

Security Defense of Large Scale Networks Under False Data Injection Attacks: An Attack Detection Scheduling Approach

Defending Against Physical Destruction Attacks on Wireless Sensor Networks

An Authentication Scheme for Locating Compromised Sensor Nodes in WSNs

Security Analysis on Node Localization Systems of Wireless Sensor Networks