位置欺骗：基于位置的社交网络服务的安全挑战
Location Cheating: A Security Challenge to Location-based Social Network Services
摘要：
基于位置的移动社交网络服务，如Foursquare和Gowalla，在过去几年中呈指数级增长。这些基于位置的服务利用地理位置来丰富各种上下文中的用户体验，包括基于位置的搜索和基于位置的移动广告。为了吸引更多的用户，当用户在某个地点或位置签到时，基于位置的移动社交网络服务向用户提供真实世界的奖励。这会刺激用户在他们的位置上作弊。在这份报告中，我们调查了位置欺骗攻击的威胁，找到了漏洞的根本原因，并概述了可能的防御机制。我们以foursquare为例介绍了一种新颖的位置欺骗攻击，它可以很容易地通过当前的位置验证机制（例如，Foursquare的作弊代码）。我们还抓取了foursquare网站。通过分析抓取的数据，我们表明自动化的大规模作弊是可能的。通过这项工作，我们的目标是呼吁注意在移动社交网络服务的位置欺骗，并提供深入的防御机制。
英文摘要：
Location-based mobile social network services such as foursquare and Gowalla have grown exponentially over the past several years. These location-based services utilize the geographical position to enrich user experiences in a variety of contexts, including location-based searching and location-based mobile advertising. To attract more users, the location-based mobile social network services provide real-world rewards to the user, when a user checks in at a certain venue or location. This gives incentives for users to cheat on their locations. In this report, we investigate the threat of location cheating attacks, find the root cause of the vulnerability, and outline the possible defending mechanisms. We use foursquare as an example to introduce a novel location cheating attack, which can easily pass the current location verification mechanism (e.g., cheater code of foursquare). We also crawl the foursquare website. By analyzing the crawled data, we show that automated large scale cheating is possible. Through this work, we aim to call attention to location cheating in mobile social network services and provide insights into the defending mechanisms.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
