Third-party apps are a major reason for the popularity and addictiveness of Facebook. Unfortunately, hackers have realized the potential of using apps for spreading malware and spam. The problem is already significant, as we find that at least 13% of apps in our dataset are malicious. So far, the research community has focused on detecting malicious posts and campaigns. First, we identify a set of features that help us distinguish malicious apps from benign ones. For example, we find that malicious apps often share names with other apps, and they typically request fewer permissions than benign apps.
>Contact me on mangenashiva@gmail.com for full documentaion and code
Presentation by Andreas Schleicher Tackling the School Absenteeism Crisis 30 ...
Detecting malicious facebook applications
1.
2. Third-party apps are a major reason for the popularity and
addictiveness of Facebook. Unfortunately, hackers have
realized the potential of using apps for spreading malware
and spam. The problem is already significant, as we find that
at least 13% of apps in our dataset are malicious. So far, the
research community has focused on detecting malicious
posts and campaigns. First, we identify a set of features that
help us distinguish malicious apps from benign ones. For
example, we find that malicious apps often share names with
other apps, and they typically request fewer permissions than
benign apps.
4. It provides security to users profile from malicious apps.
Application present a convenient means for hackers to
spread malicious content on face book.
Users on face book can only get request from benign apps.
5. ONLINE social networks enable and encourage third-party
applications to enhance the user experience on these platforms.
Recently, hackers have started taking advantage of the popularity
of this third-party apps platform and deploying malicious
applications.
Gao et al. analyzed posts on the walls of 3.5 million Facebook
users.
Yang et al. and Benevenuto et al. developed techniques to
identify accounts of spammers on Twitter.
Yardi et al. analyzed behavioral patterns among spam accounts
in Twitter.
6. We develop FRAppE, a suite of efficient classification
techniques for identifying whether an app is malicious or not.
To build FRAppE, we use data from MyPage- Keeper, a
security app in Facebook.
We find that malicious applications significantly differ from
benign applications with respect to two classes of features:
On-Demand Features and Aggregation-Based Features.
We present two variants of our malicious app classifier—
FRAppE Lite and FRAppE.
FRAppE Lite is a lightweight version that makes use of only
the application features.
7.
8. SOFTWARE :
Operating system : Windows XP/7.
Coding Language : JAVA/J2EE
IDE : Net beans 7.4
Database : MYSQL
HARDWARE:
System : Pentium IV 2.4 GHz.
Hard Disk : 40 GB.
Floppy Drive : 1.44 Mb.
Monitor : 15 VGA Colour.
Mouse : Logitech.
Ram : 512 Mb.
9. Data collection
Feature extraction
Training
Classification
Detecting Suspicious
10. The data collection component has two subcomponents: the
collection of facebook apps with URLs and crawling for URL
redirections. Whenever this component obtains a facebook
app with a URL, it executes a crawling thread that follows all
redirections of the URL and looks up the corresponding IP
addresses.
11. The feature extraction component has three subcomponents:
grouping of identical domains, finding entry point URLs, and
extracting feature vectors.
12. The training component has two subcomponents: retrieval of
account statuses and training of the classifier. Because we use
an offline supervised learning algorithm, the feature vectors
for training are relatively older than feature vectors for
classification.
13. The classification component executes our classifier using
input feature vectors to classify suspicious URLs. When the
classifier returns a number of malicious feature vectors, this
component flags the corresponding URLs information as
suspicious.
14. The Detecting Suspicious and notification module notifies all
users who have social malware posts in their wall or news
feed. The user can currently specify the notification
mechanism, which can be a combination of emailing the user
or posting a comment on the suspect posts.
15. Rahman, S.Huang, T.-K. ; Madhyastha, H.V. Faloutsos, M.
“Detecting Malicious Facebook Applications” IEEE/ACM
Transactions on Networking Volume PP, Issue 99 JANUARY
2015.
16. Naive Bayes Algorithm: For Checking App Is Malicious Or Not
It is a classification technique based on Bayes Theorem with
an assumption of independence among predictors. In simple
terms, a Naïve Bayes classifier assumes that the presence of a
particular feature in a class is unrelated to the presence of any
other feature. In our paper Naïve Bayes is used for checking
app is malicious or not.
18. Facebook apps that focuses on quantifying, profiling, and
understanding malicious apps and synthesizes this
information into an effective detection approach.
Several features used by FRAppE, such as the reputation of
redirect URIs, the number of required permissions, and the
use of different client IDs in app installation URLs, are robust
to the evolution of hackers.
19.
20. Table Name: Registration
Table Name : bustype
Field Name Type Constraints Description
Ueid Int Primary Key Customer Id
User Name Varchar(50) NULL Customer Name
Email Id Varchar(50) NULL Customer Mail Id
Password Varchar(20) NULL Security Purpose
Mobile Number Varchar(10) NULL Customer Contact
Gender Varchar(10) NULL Female/male
Country Varchar(10) NULL Display country
21. Table Name : FRNDLIST
Field Name Type Constraints Description
Fid Int Primary Key Id
RFROM Varchar(30) NULL From Person Name
RTO Varchar(30) NULL To Person Name
STATUS Varchar(20) NULL Status of the profile
22. Table Name: APP
Table Name : bustype
Field Name Type Constraints Description
APRID ID Primary Key Id
User Name Varchar(50) NULL Person Name
APPID Varchar(50) NULL Mail Id
Password Varchar(20) NULL Security Purpose
APPNAME Varchar(10) NULL identification
LICIENCENO Varchar(10) NULL Approval
APPICON Varchar(10) NULL Design
APPURL Varchar(10) NULL Search
STATUS Varchar(10) NULL Status of the profile
23. Table Name : Malicious
Field Name Type Constraints Description
Mid Int Primary Key Id
MALICIOUS Varchar(30) NULL Check harm/not
24. Table Name : Message
Field Name Type Constraints Description
Mid Int Primary Key Id
MSGFROM Varchar(30) NULL Message from S/D
MSGTO Varchar(30) NULL Message to S/D
FIL Varchar(20) NULL Requirements
25. Table Name: APRID
Table Name : bustype
Field Name Type Constraints Description
APRID ID Primary Key Id
User Name Varchar(50) NULL Person Name
APPID Varchar(50) NULL Mail Id
Password Varchar(20) NULL Security Purpose
APPNAME Varchar(10) NULL identification
LICIENCENO Varchar(10) NULL Approval
APPICON Varchar(10) NULL Design
APPURL Varchar(10) NULL Search