Matches in ScholarlyData for { ?s ?p ?o. }
- 54 hasAuthorList authorList.
- 54 isPartOf proceedings.
- 54 keyword "Security and Privacy".
- 54 title "To Join or Not to Join: The Illusion of Privacy in Social Networks with Mixed Public and Private User Profiles".
- authorList type List.
- authorList hasFirstItem item-1.
- authorList hasItem item-1.
- authorList hasItem item-2.
- authorList hasLastItem item-2.
- item-1 type ListItem.
- item-1 hasContent elena-zheleva.
- item-1 next item-2.
- item-2 type ListItem.
- item-2 hasContent lise-getoor.
- item-2 previous item-1.
- 55 type InProceedings.
- 55 label "Privacy Diffusion on the Web: A Longitudinal Perspective".
- 55 sameAs 55.
- 55 abstract "For the last few years we have studied the diffusion of private information about users as they visit various Web sites triggering data gathering aggregation by third parties. This paper reports on our longitudinal study consisting of multiple snapshots of our examination of such diffusion over four years. We examine the various technical ways by which third-party aggregators acquire data and the depth of userrelated information acquired. We study techniques for protecting against this privacy diffusion as well as limitations of such techniques. We introduce the concept of secondary privacy damage. Our results show increasing aggregation of user-related data by a steadily decreasing number of entities. A handful of companies are able to track users' movement across almost all of the popular Web sites. Virtually all the protection techniques have significant limitations highlighting the seriousness of the problem and the need for alternate solutions.".
- 55 hasAuthorList authorList.
- 55 isPartOf proceedings.
- 55 keyword "Security and Privacy".
- 55 title "Privacy Diffusion on the Web: A Longitudinal Perspective".
- authorList type List.
- authorList hasFirstItem item-1.
- authorList hasItem item-1.
- authorList hasItem item-2.
- authorList hasLastItem item-2.
- item-1 type ListItem.
- item-1 hasContent balachander-krishnamurthy.
- item-1 next item-2.
- item-2 type ListItem.
- item-2 hasContent craig-wills.
- item-2 previous item-1.
- 56 type InProceedings.
- 56 label "All Your Contacts Are Belong to Us: Automated Identity Theft Attacks on Social Networks".
- 56 sameAs 56.
- 56 abstract "Social networking sites have been increasingly gaining popularity. Well-known sites such as Facebook have been reporting growth rates as high as 3% per week [5]. Many social networking sites have millions of registered users who use these sites to share photographs, contact long-lost friends, establish new business contacts and to keep in touch. In this paper, we investigate how easy it would be for a potential attacker to launch automated crawling and identity theft attacks against a number of popular social networking sites in order to gain access to a large volume of personal user information. The first attack we present is the automated identity theft of existing user profiles and sending of friend requests to the contacts of the cloned victim. The hope, from the attacker's point of view, is that the contacted users simply trust and accept the friend request. By establishing a friendship relationship with the contacts of a victim, the attacker is able to access the sensitive personal information provided by them. In the second, more advanced attack we present, we show that it is effective and feasible to launch an automated, cross-site profile cloning attack. In this attack, we are able to automatically create a forged profile in a network where the victim is not registered yet and contact the victim's friends who are registered on both networks. Our experimental results with real users show that the automated attacks we present are effective and feasible in practice.".
- 56 hasAuthorList authorList.
- 56 isPartOf proceedings.
- 56 keyword "Security and Privacy".
- 56 title "All Your Contacts Are Belong to Us: Automated Identity Theft Attacks on Social Networks".
- authorList type List.
- authorList hasFirstItem item-1.
- authorList hasItem item-1.
- authorList hasItem item-2.
- authorList hasItem item-3.
- authorList hasItem item-4.
- authorList hasLastItem item-4.
- item-1 type ListItem.
- item-1 hasContent leyla-bilge.
- item-1 next item-2.
- item-2 type ListItem.
- item-2 hasContent thorsten-strufe.
- item-2 next item-3.
- item-2 previous item-1.
- item-3 type ListItem.
- item-3 hasContent davide-balzarotti.
- item-3 next item-4.
- item-3 previous item-2.
- item-4 type ListItem.
- item-4 hasContent engin-kirda.
- item-4 previous item-3.
- 57 type InProceedings.
- 57 label "Using Static Analysis for Ajax Intrusion Detection".
- 57 sameAs 57.
- 57 abstract "We present a static control-flow analysis for JavaScript programs running in a web browser. Our analysis tackles numerous challenges posed by modern web applications including asynchronous communication, frameworks, and dynamic code generation. We use our analysis to extract a model of expected client behavior as seen from the server, and build an intrusion-prevention proxy for the server: the proxy intercepts client requests and disables those that do not meet the expected behavior. We insert random asynchronous requests to foil mimicry attacks. Finally, we evaluate our technique against several real applications and show that it protects against an attack in a widely-used web application.".
- 57 hasAuthorList authorList.
- 57 isPartOf proceedings.
- 57 keyword "Security and Privacy".
- 57 title "Using Static Analysis for Ajax Intrusion Detection".
- authorList type List.
- authorList hasFirstItem item-1.
- authorList hasItem item-1.
- authorList hasItem item-2.
- authorList hasItem item-3.
- authorList hasLastItem item-3.
- item-1 type ListItem.
- item-1 hasContent arjun-guha.
- item-1 next item-2.
- item-2 type ListItem.
- item-2 hasContent shriram-krishnamurthi.
- item-2 next item-3.
- item-2 previous item-1.
- item-3 type ListItem.
- item-3 hasContent trevor-jim.
- item-3 previous item-2.
- 58 type InProceedings.
- 58 label "A Hybrid Phish Detection Approach by Identity Discovery and Keywords Retrieval".
- 58 sameAs 58.
- 58 abstract "Phishing is a significant security threat to the Internet, which causes tremendous economic loss every year. In this paper, we proposed a novel hybrid phish detection method based on information extraction (IE) and information retrieval (IR) techniques. The identity-based component of our method detects phishing webpages by directly discovering the inconsistency between their identity and the identity they are imitating. The keywords-retrieval component utilizes IR algorithms exploiting the power of search engines to identify phish. Our method requires no training data, no prior knowledge of phishing signatures and specific implementations, and thus is able to adapt quickly to constantly appearing new phishing patterns. Comprehensive experiments over a diverse spectrum of data sources with 11449 pages show that both components have a low false positive rate and the stacked approach achieves a true positive rate of 90.06% with a false positive rate of 1.95%.".
- 58 hasAuthorList authorList.
- 58 isPartOf proceedings.
- 58 keyword "Security and Privacy".
- 58 title "A Hybrid Phish Detection Approach by Identity Discovery and Keywords Retrieval".
- authorList type List.
- authorList hasFirstItem item-1.
- authorList hasItem item-1.
- authorList hasItem item-2.
- authorList hasLastItem item-2.