TWC: Small: Collaborative: Reputation-Escalation-as-a-Service: Analyses and Defenses

TWC：小型：协作：声誉升级即服务：分析和防御

• 批准号: 1618117
• 负责人: Haining Wang
• 金额: $ 20万
• 依托单位: University of Delaware
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-07-01 至 2020-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1618117&HistoricalAwards=false
• 关键词: TWC; Small; Collaborative; Reputation; Escalation

Living in an age when services are often rated, people are increasingly depending on reputation of sellers or products/apps when making purchases online. This puts pressure on people to gain and maintain a high reputation by offering reliable and high-quality services and/or products, which benefits the society at large. Unfortunately, due to extremely high competition in e-commerce or app stores, recently reputation manipulation related services have quickly developed into a sizable business, which is termed Reputation-Escalation-as-a-Service (REaaS). As REaaS attacks grow in scale, effective countermeasures must be designed to detect and defend against them. This research addresses REaaS from two aspects. First, it aims to understand the economics of REaaS by conducting empirical studies of e-markets. Second, it aims to develop defensive measures, which involve both technical approaches and market intervention. The technical approaches focus on detection of REaaS from e-markets, and novel detection techniques will be developed using content analysis, machine learning, social ties, and graph theory. For market invention, after a holistic analysis of REaaS, this research aims to identify its bottleneck (the weakest link) and also measure the efficacy of intervention. The outcome of this data-driven security research will enhance security education with labs based on social-economic data analysis. The success of this research will attract more attention of industry practitioners, government sectors, and academia to jointly tackle the REaaS problem.

生活在一个经常对服务进行评级的时代，人们在网上购物时越来越依赖卖家或产品/应用程序的声誉。这给人们带来了压力，要求他们通过提供可靠和高质量的服务和/或产品来获得和保持较高的声誉，从而造福整个社会。不幸的是，由于电子商务或应用商店的竞争极其激烈，最近与声誉操纵相关的服务迅速发展成为一项规模相当大的业务，这被称为声誉升级即服务（REaaS）。随着 REaaS 攻击规模不断扩大，必须设计有效的对策来检测和防御它们。本研究从两个方面探讨 REaaS。首先，它旨在通过对电子市场进行实证研究来了解 REaaS 的经济学。其次，旨在制定防御措施，包括技术手段和市场干预。 技术方法侧重于从电子市场中检测 REaaS，并将利用内容分析、机器学习、社交关系和图论来开发新颖的检测技术。对于市场发明，在对 REaaS 进行整体分析后，本研究旨在找出其瓶颈（最薄弱的环节）并衡量干预的有效性。这项数据驱动的安全研究的成果将通过基于社会经济数据分析的实验室加强安全教育。这项研究的成功将吸引更多行业从业者、政府部门和学术界的关注，共同解决 REaaS 问题。