Abstract:Sybil attacks are one kind of well-known and powerful attacks against online social networks (OSNs). In a sybil attack, a malicious attacker generates a sybil group consisting of multiple sybil users, and controls them to attack the system. However, data confidentiality policies of major social network providers have severely limited researchers' access to large-scale datasets of sybil groups. A deep understanding of sybil groups can provide important insights into the characteristics of malicious behavior, as well as numerous practical implications on the design of security mechanisms. In this paper, we present an initial study to measure sybil groups in a large-scale OSN, Renren. We analyze sybil groups at different levels, including individual information, social relationships, and malicious activities. Our main observations are: 1) user information in sybil groups is usually incomplete and in poor quality; 2) sybil groups have special evolution patterns in connectivity structure, including bursty actions to add nodes, and a monotonous merging pattern that lacks non-singleton mergings; 3) several sybil groups have strong relationships with each other and compose sybil communities, and these communities cover a large number of users and pose great potential threats; 4) some sybil users are not banned until a long time after registration in some sybil groups. The characteristics of sybil groups can be leveraged to improve the security mechanisms in OSNs to defend against sybil attacks. Specifically, we suggest that OSNs should 1) check information completeness and quality, 2) learn from dynamics of community connectivity structure to detect sybil groups, 3) monitor sybil communities and inspect them carefully to prevent collusion, and 4) inspect sybil groups that behave normally even for a long time to prevent potential malicious behaviors.

Resisting Sybil Attack By Social Network and Network Clustering

SybilDefender: Defend Against Sybil Attacks in Large Social Networks

SybilDefender: A Defense Mechanism for Sybil Attacks in Large Social Networks.

Robust and Secure Time-Synchronization Against Sybil Attacks for Sensor Networks

Defense Against Sybil Attacks in Directed Social Networks.

Survey of Sybil Attacks in Social Networks

Understanding Sybil Groups in the Wild

A Review of Techniques to Mitigate Sybil Attacks

Thank You for Being A Friend: an Attacker View on Online-Social-Network-Based Sybil Defenses.

Identification of Sybil attacks on social networks using a framework based on user interactions

Uncovering Social Network Sybils in the Wild

Detecting and Validating Sybil Groups in the Wild

Sybil in the Haystack: A Comprehensive Review of Blockchain Consensus Mechanisms in Search of Strong Sybil Attack Resistance

Study on Agent Incentives for Resource Sharing on P2P Networks

Sybil Defense In Crowdsourcing Platforms

Tight Bound on Incnetive Ratio for Sybil Attack in Resource Sharing System

Normal User Community Incoming links-1-1 1 Sybil Community Out-going links

Tight Incentive Analysis on Sybil Attacks to Market Equilibrium of Resource Exchange over General Networks

Defending Against Social Network Sybils with Interaction Graph Embedding.

SybilFence: Improving Social-Graph-Based Sybil Defenses with User Negative Feedback

P2DAP — Sybil Attacks Detection in Vehicular Ad Hoc Networks