SBIR Phase I: Stopping Cybercrime in Social Networks

SBIR 第一阶段：阻止社交网络中的网络犯罪

• 批准号: 1315083
• 负责人: Anirban Banerjee
• 金额: $ 15万
• 依托单位: CloudFlare, Inc.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-07-01 至 2014-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1315083&HistoricalAwards=false
• 关键词: SBIR; Phase; Stopping; Cybercrime; Social

The innovation proposed in this project is a novel technology to protect people and businesses from socware, which refers to cyber-crime activities enabled by and propagated on Online Social Networks (OSNs), such as Facebook, Twitter, and Pinterest. First, it is clear that OSNs is the new battleground of cybercrime with worrisome trends, and a plan towards a secure the Internet has to include safer social networks. Second, socware will require novel security solutions, as it is significantly different and cannot be detected with existing security solutions for other security threats, like viruses and malware-infected websites. The innovation of this project is a holistic and effective approach for securing OSNs and their users. The technical novelty the approach lies in: (a) how it determines socware, by combining all possible useful information, and most importantly the "social context" of a post, and (b) the extensive repertoire of questions it answers, which include detecting malicious: posts, users, and Facebook apps. A key technical challenge is to engineer the solution for a large-scale deployment. Using an early prototype, it is observed that more than 60% of people are exposed to at least one malicious link in 5 months in Facebook.There is a tremendous opportunity for the company to become the security pioneer in this space, given that these are still the early years of the social-web era. With 800M users, Facebook has become the new web: Facebook profiles are now the face of companies, instead of stand-alone websites. The effect of socware will only increase as users spend substantial time in OSNs and are influenced by them. Historically, every time a new technological platform emerges (PCs, Internet, and web), new cyber-threats and new specialized security solutions have emerged. The security landscape in OSNs is currently wide open, without a dominant player. Initially, the project will focus on Facebook, leveraging its current Facebook security application, but it will expand to other OSNs, to become the go-to security place for any social network. Outside the scope of this proposal, the long-term future plans will be opportunistic and could include services for Google+, Twitter, LinkedIn, and eventually, foreign-language networks, like the Chinese Renren, Weibo, which will be a non-trivial, but potentially lucrative expansion. The project has a multi-pronged strategy for monetizing the proposed technology, which will help create new services and complement the current successful services of the company, as evidenced by the feedback from the company's partners.

该项目中提出的创新是一种保护个人和企业免受socware攻击的新技术，socware是指由Facebook、Twitter和Pinterest等在线社交网络（OSN）支持和传播的网络犯罪活动。首先，很明显，OSN是网络犯罪的新战场，其趋势令人担忧，一个安全的互联网计划必须包括更安全的社交网络。其次，socware将需要新的安全解决方案，因为它是显着不同的，不能检测与现有的安全解决方案的其他安全威胁，如病毒和恶意软件感染的网站。 该项目的创新之处在于为保护OSN及其用户提供了一种全面有效的方法。该方法的技术新奇性在于：（a）它如何通过结合所有可能的有用信息来确定socware，最重要的是帖子的“社会背景”，以及（B）它回答的广泛问题，其中包括检测恶意：帖子，用户和Facebook应用程序。一个关键的技术挑战是为大规模部署设计解决方案。使用早期的原型，据观察，超过60%的人暴露在至少一个恶意链接在5个月内在Facebook.有一个巨大的机会，该公司成为安全先锋在这个领域，鉴于这些仍然是早期的社会网络时代.拥有8亿用户的Facebook已经成为新的网络：Facebook的个人资料现在是公司的面孔，而不是独立的网站。socware的效果只会随着用户在OSN上花费大量时间并受到它们的影响而增加。从历史上看，每次出现新的技术平台（PC、互联网和Web），都会出现新的网络威胁和新的专业安全解决方案。 OSN的安全格局目前是开放的，没有一个主导者。最初，该项目将专注于Facebook，利用其当前的Facebook安全应用程序，但它将扩展到其他OSN，成为任何社交网络的首选安全场所。在这一提议的范围之外，未来的长期计划将是机会主义的，可能包括为Google+、Twitter、LinkedIn提供服务，并最终包括外语网络，如中国的人人网、微博，这将是一个不平凡的，但可能有利可图的扩张。该项目有一个多管齐下的战略，用于将拟议的技术货币化，这将有助于创建新的服务，并补充公司目前成功的服务，正如公司合作伙伴的反馈所证明的那样。