Who on Earth Is 'Mr. Cypher': Automated Friend Injection Attacks on Social Networking Sites

摘要

Within this paper we present our novel friend injection attack which exploits the fact that the great majority of social networking sites fail to protect the communication between its users and their services. In a practical evaluation, on the basis of public wireless access points, we furthermore demonstrate the fea sibility of our attack. The friend injection attack enables a stealth infiltration of social networks and thus outlines the devastating consequences of active eaves dropping attacks against social networking sites.