农奴和草皮:为娱乐和利润而进行的人群草皮运动
Serf and Turf: Crowdturfing for Fun and Profit
摘要:
近年来流行的互联网服务表明,通过利用众包系统来利用大众的力量,可以取得非凡的成就。然而,众包系统也可能对为保护互联网服务而部署的现有安全机制构成真正的挑战。这些技术中的许多技术假设恶意活动是由机器自动生成的,并且如果用户可以被组织为使用众包系统执行恶意任务,则表现不佳或失败。通过测量,我们发现了令人惊讶的证据,表明恶意众包系统不仅存在,而且在用户群和总收入方面都在迅速增长。在本文中,我们描述了一个重要的努力,研究和理解这些“crowdturfing”系统在今天的互联网。我们使用详细的抓取来提取这些crowdturfing系统的大小和操作结构的数据。我们分析这些网站提供和执行的活动的详细信息,并通过运行我们自己的活动,非恶意活动来评估其端到端的有效性。最后,我们研究和比较了不同国家的人群草坪的工人来源。我们的研究结果表明,这些系统上的活动在接触用户方面非常有效,它们的持续增长对美国和其他地方的社交网络等在线社区构成了具体威胁。
英文摘要:
Popular Internet services in recent years have shown that remarkable things can be achieved by harnessing the power of the masses using crowd-sourcing systems. However, crowd-sourcing systems can also pose a real challenge to existing security mechanisms deployed to protect Internet services. Many of these techniques make the assumption that malicious activity is generated automatically by machines, and perform poorly or fail if users can be organized to perform malicious tasks using crowd-sourcing systems. Through measurements, we have found surprising evidence showing that not only do malicious crowd-sourcing systems exist, but they are rapidly growing in both user base and total revenue. In this paper, we describe a significant effort to study and understand these "crowdturfing" systems in today's Internet. We use detailed crawls to extract data about the size and operational structure of these crowdturfing systems. We analyze details of campaigns offered and performed in these sites, and evaluate their end-to-end effectiveness by running active, non-malicious campaigns of our own. Finally, we study and compare the source of workers on crowdturfing sites in different countries. Our results suggest that campaigns on these systems are highly effective at reaching users, and their continuing growth poses a concrete threat to online communities such as social networks, both in the US and elsewhere.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。