基于距离跃变的"探探"恶意用户定位方法

A Malicious User Geolocation Method on Tantan App with Distance Transition

郭家山 ¹杜少勇 ²时文旗 ³刘瑞婷 ³罗向阳³

扫码查看

作者信息

1. 郑州大学网络空间安全学院郑州中国 450001;河南省网络空间态势感知重点实验室郑州中国 450001
2. 河南省网络空间态势感知重点实验室郑州中国 450001;中国科学院信息工程研究所信息安全国家重点实验室北京中国 100093
3. 河南省网络空间态势感知重点实验室郑州中国 450001
折叠

摘要

近年来,"探探"作为国内知名即时通信平台之一,常常被恶意用户用来实施诈骗、策反等各类不法活动.为有效发现和打击探探平台上的此类恶意用户,亟需针对探探恶意用户的定位技术.然而,当前国内外尚未见针对探探用户定位的相关报道,现有针对其他即时通信平台的定位方法由于没有考虑探探平台的特点(即,通告距离的特性),难以高效发现用户和实施高精度定位.为此,本文提出了一种针对探探的基于通告距离跃变分析的恶意用户定位方法.本文结合探探平台通告距离的数据特点,分析了通告距离与实际距离关系,建立了探探平台通告距离模型;为了有效逼近恶意用户,结合分段式通告距离模型特点,本文设计了恶意用户潜在区域发现算法;为了提升定位精度,本文结合探探的通告距离跃变特点,设计了一种基于距离跃变的定位算法,通过探针移动策略以更好地获得跃变距离,并结合三边测量方法得到目标的理论位置.在实际网络环境下开展了一系列实验,结果表明:本文所提方法平均定位误差为20.92 m,且95%的定位误差小于50 m,相比于现有基于空间分割、加权最小二乘、启发式数论等针对微信、陌陌等的典型定位方法,定位误差降低34.99%～60.60%.

Abstract

In recent years,as one of the well-known instant messaging platforms in China,Tantan is often used by mali-cious users to carry out various illegal activities such as fraud and countermeasures.To effectively discover and combat such malicious users on the Tantan platform,it is urgent to target the positioning technology of Tantan malicious users.However,at present,there are no relevant reports at home and abroad on Tantan user positioning.The existing positioning methods for other instant messaging platforms do not consider the characteristics of Tantan platform(i.e.,the characteris-tics of report distance),which makes it difficult to efficiently find users and implement high-precision positioning.There-fore,this paper proposes a malicious user geolocation method on Tantan app with distance transition.Based on the data characteristics of report distance of the Tantan,the relationship between the report distance and actual distance is analyzed,and the report distance model of the Tantan is established.Aiming at the characteristics of segmented report distance model and approaching malicious users,this paper designs a potential area discovery algorithm for malicious users.To improve the positioning accuracy,this paper designs a geolocation algorithm based on distance transition by combining the characteristics of probe to announce distance transition,and the probe movement strategy is used to better obtain the tran-sition distance,and the theoretical position of the target is obtained by combining the trilateration method.A series of ex-periments are carried out in the actual network environment,and the results show that the average positioning error of the proposed method is 20.92 m,and 95%of the positioning error is less than 50 m,which is reduced by 34.99%～60.60%compared with the existing typical positioning methods for WeChat and Momo based on space partition,weighted least squares,and heuristic number theory.

关键词

即时通信/探探/恶意用户定位/通告距离模型/距离跃变

Key words

instant messaging/Tantan/malicious user geolocation/model of report distance/distance transition

引用本文复制引用

出版年

2024

信息安全学报

CSTPCDCSCD

ISSN：

段落导航