| 引用本文： |
-
郭家山,杜少勇,时文旗,刘瑞婷,罗向阳.基于距离跃变的“探探”恶意用户定位方法[J].信息安全学报,已采用 [点击复制]
- Jiashan Guo,Shaoyong Du,Wenqi Shi,Ruiting Liu,Xiangyang Luo.A Malicious User Geolocation Method on Tantan App with Distance Transition[J].Journal of Cyber Security,Accept [点击复制]
|
|
| 摘要: |
| 摘要 近年来，“探探”作为国内知名即时通信平台之一，常常被恶意用户用来实施诈骗、策反等各类不法活动。为有效发现和打击探探平台上的此类恶意用户，亟需针对探探恶意用户的定位技术。然而，当前国内外尚未见针对探探用户定位的相关报道，现有针对其他即时通信平台的定位方法由于没有考虑探探平台的特点（即，通告距离的特性），难以高效发现用户和实施高精度定位。为此，本文提出了一种针对探探的基于通告距离跃变分析的恶意用户定位方法。本文结合探探平台通告距离的数据特点，分析了通告距离与实际距离关系，建立了探探平台通告距离模型；为了有效逼近恶意用户，结合分段式通告距离模型特点，本文设计了恶意用户潜在区域发现算法；为了提升定位精度，本文结合探探的通告距离跃变特点，设计了一种基于距离跃变的定位算法，通过探针移动策略以更好地获得跃变距离，并结合三边测量方法得到目标的理论位置。在实际网络环境下开展了一系列实验，结果表明：本文所提方法平均定位误差为20.92m，且95%的定位误差小于50m，相比于现有基于空间分割、加权最小二乘、启发式数论等针对微信、陌陌等的典型定位方法，定位误差降低34.99%-60.60%。 |
| 关键词: 即时通信，探探，恶意用户定位，通告距离模型，距离跃变 |
| DOI： |
| 投稿时间：2022-12-04修订日期：2023-02-24 |
| 基金项目:国家自然科学基金项目（面上项目，重点项目，重大项目）、中原科技创新领军人才计划 |
|
| A Malicious User Geolocation Method on Tantan App with Distance Transition |
|
Jiashan Guo1, Shaoyong Du2, Wenqi Shi3, Ruiting Liu3, Xiangyang Luo3
|
| (1.School of Cyber Science and Engineering, Zhengzhou University, Key Laboratory of Cyberspace Situation Awareness of Henan Province;2.Key Laboratory of Cyberspace Situation Awareness of Henan Province, State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences;3.Key Laboratory of Cyberspace Situation Awareness of Henan Province) |
| Abstract: |
| Abstract In recent years, as one of the well-known instant messaging platforms in China, Tantan is often used by malicious users to carry out various illegal activities such as fraud and countermeasures. To effectively discover and combat such malicious users on the Tantan platform, it is urgent to target the positioning technology of Tantan malicious users. However, at present, there are no relevant reports at home and abroad on Tantan user positioning. The existing positioning methods for other instant messaging platforms do not consider the characteristics of Tantan platform (i.e., the characteristics of report distance), which makes it difficult to efficiently find users and implement high-precision positioning. Therefore, this paper proposes a malicious user geolocation method on Tantan app with distance transition. Based on the data characteristics of report distance of the Tantan, the relationship between the report distance and actual distance is analyzed, and the report distance model of the Tantan is established. Aiming at the characteristics of segmented report distance model and approaching malicious users, this paper designs a poten-tial area discovery algorithm for malicious users. To improve the positioning accuracy, this paper designs a geoloca-tion algorithm based on distance transition by combining the characteristics of probe to announce distance transi-tion, and the probe movement strategy is used to better obtain the transition distance, and the theoretical position of the target is obtained by combining the trilateration method. A series of experiments are carried out in the actual network environment, and the results show that the average positioning error of the proposed method is 20.92m, and 95% of the positioning error is less than 50m, which is reduced by 34.99%-60.60% compared with the existing typ-ical positioning methods for WeChat and Momo based on space partition, weighted least squares, and heuristic number theory. |
| Key words: instant messaging, Tantan, malicious user geolocation, model of report distance, distance transition |
