CRII: SaTC: A Framework to Defend Against Sockpuppet Connection Requests in Social Networks

CRII：SaTC：防御社交网络中 Sockpuppet 连接请求的框架

• 批准号: 2153482
• 负责人: Sajedul Talukder
• 金额: $ 15.79万
• 依托单位: Southern Illinois University at Carbondale
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-04-01 至 2025-03-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2153482&HistoricalAwards=false
• 关键词: CRII; SaTC; Framework; Defend; Against

This award is funded in whole or in part under the American Rescue Plan Act of 2021 (Public Law 117-2).Links between people in Online Social Networks (OSNs) have been used by attackers to access private and sensitive user data, post false or abusive information on the timelines and news feeds of victims, and scam and influence the perceptions of victims. The massive growth of social media usage has incentivized perpetrators to connect users through fake "sockpuppet" accounts, an attack that is often successful due to the lack of adequate verification of declared information. The goal of this project is to significantly expand the understanding of identity deception and abuse in online social networks, and design and build intervention mechanisms to mitigate these types of attacks. The project team will work with social media users to create a digital framework that can assess users' risk of falling victim to sockpuppet attacks, educate them about these attacks, and help them carefully examine connection invites and avoid accepting invitations from suspicious accounts. This goal is to develop a new generation of sockpuppet prevention solutions that have the potential to help protect millions of vulnerable OSN users from sexual predators, online fraudsters, scammers, adversaries, or malicious hackers.This project will build a digital framework rooted in cognitive psychology, UX research, and machine learning methods to defend against sockpuppet connection requests in online social networks. In a first research thrust, the researchers will develop survey instruments and user studies to investigate pending connection decisions, motivations, and behaviors in OSNs. The findings from this research thrust will be utilized to develop the next thrust, where the researchers will implement a "spam connection" folder through a pending connection decision classifier. Finally, the researchers will ievelop a novel Online Social Network Pending Connection Processing Interface .This will be designed as a layer on top of existing social networks that can be used to administer and assess educational and interface interventions around sockpuppets in the context of real social networks, while allowing the research team to address ethical and legal considerations of working with sockpuppet connections and people's private data. Together, this work will both enhance the understanding of just-in-time motivations and behaviors related to social network risks and help sociologists gain deeper insights from underexplored social and spatial dimensions provided by social networks to test relevant theories.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该奖项全部或部分由2021年美国救援计划法案（公法117-2）资助。在线社交网络（OSN）中的人之间的链接已被攻击者用于访问私人和敏感的用户数据，在受害者的时间表和新闻提要上发布虚假或滥用信息，并欺骗和影响受害者的看法。社交媒体使用的大规模增长促使犯罪者通过虚假的“sockpuppet”账户连接用户，由于缺乏对申报信息的充分验证，这种攻击往往会成功。该项目的目标是大大扩大对在线社交网络中身份欺骗和滥用的理解，并设计和建立干预机制，以减轻这些类型的攻击。该项目团队将与社交媒体用户合作，创建一个数字框架，可以评估用户成为sockpuppet攻击受害者的风险，教育他们了解这些攻击，并帮助他们仔细检查连接邀请，避免接受可疑帐户的邀请。该目标是开发新一代sockpuppet预防解决方案，有可能帮助保护数百万脆弱的OSN用户免受性侵犯者、在线欺诈者、诈骗者、对手或恶意黑客的侵害。该项目将构建一个植根于认知心理学、用户体验研究的数字框架和机器学习方法，以防御在线社交网络中的sockpuppet连接请求。在第一个研究重点中，研究人员将开发调查工具和用户研究，以调查OSN中悬而未决的连接决策，动机和行为。这项研究的结果将用于开发下一个目标，研究人员将通过一个未决连接决策分类器实现一个“垃圾邮件连接”文件夹。最后，研究人员将开发一种新的在线社交网络待连接处理接口。这将被设计为现有社交网络之上的一层，可用于在真实的社交网络的背景下管理和评估围绕sockpuppet的教育和接口干预，同时允许研究团队解决与sockpuppet连接和人们的私人数据有关的道德和法律的考虑。总之，这项工作将加强对与社交网络风险相关的即时动机和行为的理解，并帮助社会学家从社交网络提供的未充分探索的社会和空间维度中获得更深入的见解，以测试相关理论。该奖项反映了NSF的法定使命，并被认为值得通过使用基金会的智力价值和更广泛的影响审查标准进行评估来支持。

项目成果

User awareness and defenses against sockpuppet friend invitations in Facebook

用户对 Facebook 中马甲好友邀请的认知和防御

• DOI: 10.1145/3477314.3507012
• 发表时间: 2022
• 期刊: Proceedings of the 37th ACM/SIGAPP Symposium on Applied Computing
• 作者: Talukder, Sajedul;Hernandez, Nestor;Azimpourkivi, Mozhgan;Carbunar, Bogdan
• 通讯作者: Carbunar, Bogdan