Fifteen minutes of unwanted fame: detecting and characterizing doxing
Fifteen minutes of unwanted fame: detecting and characterizing doxing
复制标题
十五分钟不必要的名声：检测和描述人肉搜索
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Damon McCoy
中科院分区：
文献类型：
--
作者：
Peter Snyder;Periwinkle Doerfler;Chris Kanich;Damon McCoy
Doxing是一种在线滥用，其中恶意方通过释放识别或敏感信息来伤害另一方。doxing的动机包括个人，竞争和政治原因，所有年龄，性别和互联网经验的网络用户都是目标。现有的关于doxing的研究主要是定性的。这项工作提高了我们的理解doxing是第一个采取定量的方法。我们这样做是通过设计和部署一个工具，可以检测dox文件和测量的频率，内容，目标和doxing流行的dox张贴网站的影响。这项工作分析了超过170万个发布到paste-bin.com，4chan.org和8ch.net的文本文件，这些网站经常用于在线共享doxes，总共大约13周。这项工作中值得注意的发现包括大约0.3%的共享文件是doxes，这些dox文件中提到的在线社交网络帐户比典型帐户更有可能关闭，正义和报复是doxing最常引用的动机，dox文件的目标男性比女性更频繁。我们还发现，最近社交网络的反滥用努力减少了这些doxing受害者在受到攻击后关闭或限制其帐户的频率。我们还提出了缓解措施，例如当人们的账户在dox文件中共享时，可以通知他们的服务，或者当个人面临更高的滥用风险时，可以通知当局的执法通知工具。
Doxing is online abuse where a malicious party harms another by releasing identifying or sensitive information. Motivations for doxing include personal, competitive, and political reasons, and web users of all ages, genders and internet experience have been targeted. Existing research on doxing is primarily qualitative. This work improves our understanding of doxing by being the first to take a quantitative approach. We do so by designing and deploying a tool which can detect dox files and measure the frequency, content, targets, and effects of doxing on popular dox-posting sites. This work analyzes over 1.7 million text files posted to paste-bin.com, 4chan.org and 8ch.net, sites frequently used to share doxes online, over a combined period of approximately thirteen weeks. Notable findings in this work include that approximately 0.3% of shared files are doxes, that online social networking accounts mentioned in these dox files are more likely to close than typical accounts, that justice and revenge are the most often cited motivations for doxing, and that dox files target males more frequently than females. We also find that recent anti-abuse efforts by social networks have reduced how frequently these doxing victims closed or restricted their accounts after being attacked. We also propose mitigation steps, such a service that can inform people when their accounts have been shared in a dox file, or law enforcement notification tools to inform authorities when individuals are at heightened risk of abuse.