论文标题

放大视频会议,隐私和安全威胁

Zooming Into Video Conferencing Privacy and Security Threats

论文作者

Kagan, Dima, Alpert, Galit Fuhrmann, Fire, Michael

论文摘要

Covid-19-19爆发与相关的社会疏远和现场措施的大流行爆发极大地影响了人们相互交流的方式,迫使人们找到新的方式来协作,学习,庆祝特殊场合,并与家人和朋友见面。出现的最受欢迎的解决方案之一是使用视频会议应用程序用虚拟会议替换面对面的会议。这导致了视频会议用户数量的前所未有的增长。在这项研究中,我们探讨了通过参加虚拟会议可能有风险的隐私问题。我们从公开发布在网络上的会议参与者的拼贴图像中提取了私人信息。我们使用图像处理,文本识别工具以及社交网络分析来探索我们的网络爬网策划的数据集,其中超过15,700张拼贴图像以及142,000多个会议参与者的面孔图像。我们证明,视频会议用户面临普遍的安全性和隐私威胁。我们的结果表明,收集成千上万的视频会议会议图像并提取有关参与者的个人信息,包括他们的面部图像,年龄,性别,用户名,有时甚至全名。这种提取的数据在线和现实世界中都可以极大地危害人们的安全和隐私,不仅影响成年人,而且影响社会中更脆弱的阶层,例如幼儿和老年人。最后,我们表明,通过社交网络数据将面部图像数据与社交网络数据进行交叉引用可能会使参与者处于可能不知道的其他隐私风险,并且可以识别出在几次视频会议会议上出现的用户,从而提供了恶意汇总有关目标个人的不同信息来源的潜力。

The COVID-19 pandemic outbreak, with its related social distancing and shelter-in-place measures, has dramatically affected ways in which people communicate with each other, forcing people to find new ways to collaborate, study, celebrate special occasions, and meet with family and friends. One of the most popular solutions that have emerged is the use of video conferencing applications to replace face-to-face meetings with virtual meetings. This resulted in unprecedented growth in the number of video conferencing users. In this study, we explored privacy issues that may be at risk by attending virtual meetings. We extracted private information from collage images of meeting participants that are publicly posted on the Web. We used image processing, text recognition tools, as well as social network analysis to explore our web crawling curated dataset of over 15,700 collage images, and over 142,000 face images of meeting participants. We demonstrate that video conference users are facing prevalent security and privacy threats. Our results indicate that it is relatively easy to collect thousands of publicly available images of video conference meetings and extract personal information about the participants, including their face images, age, gender, usernames, and sometimes even full names. This type of extracted data can vastly and easily jeopardize people's security and privacy both in the online and real-world, affecting not only adults but also more vulnerable segments of society, such as young children and older adults. Finally, we show that cross-referencing facial image data with social network data may put participants at additional privacy risks they may not be aware of and that it is possible to identify users that appear in several video conference meetings, thus providing a potential to maliciously aggregate different sources of information about a target individual.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源