社交网络中基于定位欺骗的隐私攻击研究  

Research on Privacy Attack Based on Location Cheating in Social Network

作　　者：李晴[1] 叶阿勇[1] 许力[1] LI Qing;YE A-yong;XU Li(College of Mathematics and Computer Science, Fujian Normal University, Fuzhou Fujian 350007, China)

机构地区：[1]福建师范大学数学与计算机科学学院,福建福州350007

出　　处：《信息网络安全》2017年第5期51-56,共6页Netinfo Security

基　　金：国家自然科学基金海峡联合基金重点项目[U1405255];福建省高校自然科学基金青年重点项目[JZ160430];福州科技计划项目[2015-G-51]

摘　　要：基于位置的社交网络服务(Location-based Social Network Service,LBSNS)被普遍认为是未来社交网络服务发展的重要趋势。LBSNS将信息分享与位置相结合,极大丰富了人们的移动社交内容。然而,由于位置信息与客观世界具有关联性,LBSNS中的位置共享可能泄露用户的身份信息。针对该隐患,文章提出一种基于定位欺骗的隐私攻击。该攻击首先采用Aircrack-ng和MDK3工具伪造AP,将目标用户的定位信息欺骗到指定位置;然后,利用该位置的特殊性以及社交网络的信息共享特点,获得目标用户的身份信息。文章剖析该隐私攻击的原理和实施步骤,并在若干主流社交网络应用中进行验证。验证表明,该攻击可以获取用户在其社交网络中的数字身份信息,从而导致用户隐私泄露。Location-based social network service(LBSNS)is widely considered to be theimportant trend of social networking services in the future.LBSNS combines the information sharingwith location,which greatly enriches the people's mobile social contents.However,because the locationinformation is associated with the objective world,location sharing in LBSNS may disclose the identityinformation of the user.For the hidden danger,this paper proposes a privacy attack based on locationcheating.The attack fi rstly adopts the Aircrack-ng and MDK3tools to forge the AP,which deceives thetarget user's location to a specifi ed location.Then,the identity information of the target user is obtainedby using the particularity of the specifi ed location and the characteristic of information sharing in socialnetwork.The paper analyzes the principle and implementation steps of the privacy attack,and validatesthe attack in some mainstream social network applications.Validation shows that the attack can get thedigital identity information of the user,which leads to disclosure of user privacy.

关 键 词：基于位置的社交网络 无线定位系统 定位欺骗 隐私攻击 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]