Download - Salucci Simone Tesi
-
7/25/2019 Salucci Simone Tesi
1/58
ALMA MATER STUDIORUM - UNIVERSIT DI BOLOGNA
SCUOLA DI SCIENZE
CORSO DI LAUREA IN INFORMATICA
PRIVACY SU FACEBOOK
TESI DI LAUREA INARCHITETTURA DEGLI ELABORATORI
Relatore: presetata !a:"ro#$ V%ttor%o G&%% S%'oe Sal())%
Sess%oe IIIAnno Accademico 2011/2012
*
-
7/25/2019 Salucci Simone Tesi
2/58
+
-
7/25/2019 Salucci Simone Tesi
3/58
Indice
* Itro!(,%oe
+ S)ear%o .
+$* Iteret al /%oro !0o//% $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ .
+$+ I so)%al et1or2 $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 3
+$4 I r%s)&% !e% so)%al et1or2 $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ *5
4 L0atta))o *6
4$* L0al/or%t'o e le #as% !ell0atta))o $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ *6
O7%ett%8% 4*
9 Val(ta,%o% 44
9$* La )o'pless%t !elle pass1or! $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 44
9$+ Le (o8e A"I e %l pro7le'a !ell0e'a%l $ $ $ $ $ $ $ $ $ $ $ $ 4.
9$4 Il ;so)%al p&%s&%/< $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ .
9$4$* ;"&%s&%/< e ;spear p&%s&%/< $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ .
9$4$+ Il so)%al p&%s&%/ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 95
9$4$4 Il (o8o al/or%t'o !% atta))o $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 9*
= Co)l(s%o% 99
=$* S8%l(pp% #(t(r% $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 9=
B%7l%o/ra#%a 9.
4
-
7/25/2019 Salucci Simone Tesi
4/58
Capitolo 1
Introd!ione
Da >(al)&e ao? or'a%? % so)%al et1or2 &ao #atto %rr(,%oe s( %teret
!%8eta!o )ol te'po se'pre p%@ (t%l%,,at% e solle8a!o !% )ose/(e,a !(77%
se'pre 'a//%or% s(lla s%)(re,,a !ella pr%8a)$
T(tt% % so)%al et1or2 s% presetao )o'e p%atta#or'e % )(% /l% (tet% possoo
%tera/%re )o a'%)%? paret% o s)oos)%(t% )o )(% s% )o!%8%!oo /l% stess%
%teress%? s8%l(ppa!o )os rela,%o% persoal% e? % al)(% )as%? pro#ess%oal%$
(esto rap%!o e! espoe,%ale s8%l(ppo &a att%rato l0atte,%oe? o solo !e/l%
(tet%? 'a a)&e !% 'al%te,%oat%$
Or'a% la 'a//%or parte !e/l% (tet% !ella rete rep(ta % so)%al et1or2 (o
str('eto (t%le e %!%spesa7%le per str%/ere e 'ateere le/a'% ella 8%ta !%
t(tt% % /%or%? 'a %l pre,,o !a pa/are potre77e r%8elars% p%(ttosto )aro$
Nel +5*5 A!rea V%tal%? ella s(a tes% !al t%tolo ;L0** sette'7re tele'at%)o
-
7/25/2019 Salucci Simone Tesi
5/58
s)ear%o !% parte,a per po% !etta/l%are? el )ap%tolo s())ess%8o? %l
#(,%oa'eto !ell0al/or%t'o !% atta))o !a espl%)%tare? el )ap%tolo >(arto? /l%o7%ett%8% !% >(esto ela7orato$
Nel >(%to )ap%tolo parte!o !a (0aal%s% s(lla s%)(re,,a !elle pass1or!
relat%8a'ete alle a7%t(!%% !e/l% (tet% stess%? s% passer po% a (a 8al(ta,%oe
!e% pro7le'% )&e le (o8e pol%t%)&e !% pr%8a) e s%)(re,,a !% Fa)e7oo2
potre77ero )reare all0(t%l%,,o !ell0al/or%t'o !% atta))o per po% tro8are !e%
'eto!% per att(al%,,arlo e! (a te)%)a per '%/l%orare le presta,%o%$
9
-
7/25/2019 Salucci Simone Tesi
6/58
=
-
7/25/2019 Salucci Simone Tesi
7/58
Capitolo 2
Scenario
2"1 Internet al #iorno d$o##i
L0(t%l%,,o !% %teret e la s(a peetra,%oe all0%tero !ella popola,%oe )res)e
!% ao % ao: +3?6 s( =9+?* '%l%o% !% persoe % E(ropa soo ol%e$
Se)o!o % !at% !% (a r%)er)a !el +5*+? ese/(%ta !a Me!%as)ope E(rope=? la
'e!%a e(ropea !% te'po tras)orso ol%e !% *?3 ore la sett%'aa? te!e,a
)&e &a re/%strato (a )res)%ta !el *5 r%spetto al +5*5 e >(esto !ato
!est%ato a )res)ere$
O//% /ra,%e alla !%##(s%oe se'pre 'a//%ore !% ta7let e! % part%)olare !e/l%
s'artp&oe? %teret se'pre p%@ a portata !% 'ao tato )&e s% )ota )&e %l
('ero !% !%spos%t%8% )oess% a! %teret a77%a s(perato %l ('ero !elle
persoe$
La peetra,%oe !% %teret all0%tero !ella popola,%oe e(ropea &a ra//%(to
%l =9? *6 % p%@ r%spetto al +5*5$
Att%8%t )o'e /(ar!are la tele8%s%oe? as)oltare la ra!%o? le//ere le ot%,%e o %
/%oral% 8e/oo s8olte se'pre p%@ ol%e: %l .4 !e/l% (tet% !% %teret/(ar!a la t8 ol%e? %l =. as)olta la ra!%o ol%e? %l 6* le//e le ot%,%e s(l
1e7$
Solo % E(ropa %l 4. !e/l% (tet% a))e!oo a! %teret (t%l%,,a!o p%@ !% (
!e8%)eJ ella 'a//%or parte !e% )as% s% tratta !% p) e s'artp&oe? 'a !a >(al)&e
ao a)&e le )osole !% %tratte%'eto )o'e "lastat%o e K7o &ao
.
-
7/25/2019 Salucci Simone Tesi
8/58
a))esso a! %teret )os )o'e % tele8%sor% !% (lt%'a /eera,%oe$
Appare >(%!% e8%!ete )&e )o %l passare !el te'po %l ('ero !% !%spos%t%8%)olle/at% !est%ato a )res)ereJ se !a ( lato >(esta se'pre 'a//%ore
)oett%8%t porta 8ata//% e )o'o!%t? !all0altro 8% ( a('eto !e% per%)ol%
per la s%)(re,,a !% >(est% !%spos%t%8% e per la r%ser8ate,,a !e% !at% ses%7%l%$
2"2 I %ocial net&or'
Da >(al)&e ao % so)%al et1or2 soo se'pre p%@ popolar%? se e parla
o8(>(e? !alle tele8%s%o% a% /%oral%? %#l(e,a!o se'pre !% p%@ la 8%ta !%
t(tt%J Fa)e7oo2? %l p%@ (t%l%,,ato tra % so)%al et1or2? !a solo &a s(perato %l
'%l%ar!o !% (tet%? tato )&e se #osse (a a,%oe sare77e la ter,a p%@ /ra!e
!el 'o!o? par% a !(e 8olte la popola,%oe !e/l% Stat% U%t%$
3
Figura 2.2.1: Grafico traffico Facebook vs Google
-
7/25/2019 Salucci Simone Tesi
9/58
Nel 'ar,o !el +5*5? )o'e 'ette % e8%!e,a %l /ra#%)o? Fa)e7oo2 &a s(perato
Goo/le a l%8ello !% tra##%)o !%8eta!o )os %l s%to p%@ 8%s%tato !e/l% Stat% U%t%J%oltre %l te'po tras)orso % 'e!%a s(% so)%al et1or2? % part%)olare s(
Fa)e7oo2? &a s(perato %l te'po tras)orso s( >(als%as% altro s%to? Goo/le
)o'preso$
Gl% a'er%)a% passao % 'e!%a .?9 ore al 'ese s(% so)%al et1or2? >(est%
or'a% %#l(e,ao se'pre p%@ le att%8%t !% t(tt% % /%or%? %#att% 'etre
/(ar!%a'o (a ser%e tele8%s%8a 8e%a'o %8%tat% a )o''etarla s(% so)%al
et1or2? % part%)olare s( t1%tter )o ( &as&ta/ spe)%#%)o$
Nell0(lt%'o ao a)&e %l "apa &a att%8ato ( a))o(t s( T1%tter e elle (lt%'e
ele,%o% pol%t%)&e % Ital%a? 7(oa parte !ella )a'pa/a elettorale stata
portata a8at% s(% so)%al et1or2 tato )&e a)&e e% 'a%#est% elettoral% a##%ss%
per le stra!e era poss%7%le 8e!ere % s%'7ol% !% Fa)e7oo2 e T1%tter$
Ne% 8%!eo/%o)&% s% &a la poss%7%l%t !% )o!%8%!ere % propr% p(te//% s(% so)%al:
a!!%r%tt(ra el )otroller !ella (o8a plastat%o sar presete %l tasto ;s&are(als%as% s)opo$
6
Figura 2.2.2: Statistiche utenti Facebook per continenti
-
7/25/2019 Salucci Simone Tesi
10/58
I /ra#%)% r%portao al)(% !at% r%/(ar!o al ('ero !% (tet% !% Fa)e7oo2 pres%
!al s%to 111$so)%al7a2ers$)o'.$
2"( I ri%c)i dei %ocial net&or'
All0%tero !e% so)%al et1or2 soo 'e'or%,,ate 'olt%ss%'e %#or'a,%o%
persoal% )&e r%s)&%ao !% !%8etare a))ess%7%l% a s)oos)%(t% e a pote,%al%
'al%te,%oat%$
*5
Figura 2.2.3: Statistiche utenti Facebook per nazioni
-
7/25/2019 Salucci Simone Tesi
11/58
(esta pro7le'at%)a stata a##rotata % (a R%sol(,%oe !e% .3 /arat%
'o!%al% per la pr%8a) el +553? ella >(ale s% le//e :
;I !at% persoal% !%8e/oo %#att% !%spo%7%l% p(77l%)a'ete e % 'o!o
/lo7ale? se)o!o s)&e'% >(al%tat%8% e >(at%tat%8% )&e o &ao pre)e!et%?
a)&e attra8erso eor'% >(at%t !% #oto e 8%!eo !%/%tal%
-
7/25/2019 Salucci Simone Tesi
12/58
ar)&%8%st%)a e la #(,%oe !% Q)a)&eQ !%spo%7%le presso ( ot%ss%'o 'otore
!% r%)er)a$ Ioltre? al)(% #or%tor% !% ser8%,% r%#%(tao !% otte'perare o ootte'perao a##atto alle r%)&%este !e/l% (tet% !% otteere la )a)ella,%oe !%
!at% e? sopratt(tto? !% %ter% pro#%l%$
+$ L%!ea %/ae8ole !% Q)o'(%tQ$ Molt% #or%tor% !% ser8%,% a##er'ao !%
tras#er%re le str(tt(re )o'(%)at%8e !al 'o!o QrealeQ al )7erspa,%o$
Ua##er'a,%oe #re>(ete )&e o )% sare77ero pro7le'%? per ese'p%o? a
p(77l%)are !at% persoal%s( >(este p%atta#or'e? per)& )o'e se s%
)o!%8%!essero %#or'a,%o% )o ( /r(ppo !% a'%)% el 'o!o reale$
Se per s% 8ao a! esa'%are )o p%@ atte,%oe al)(e )aratter%st%)&e !% )ert%
ser8%,%? s% 8e!r )&e %l parallelo o re//e a)&e per)& %l )o)etto !% Qa'%)%Q
el )7erspa,%o p( r%s(ltare assa% !%8erso !all%!ea p%@ tra!%,%oale !%
a'%)%,%a? e la )o'(%t p( essere assa% estesa$ Se o s% %#or'ao /l% (tet%
% 'o!o trasparete s(lle 'o!al%t !% )o!%8%s%oe !elle %#or'a,%o%
)ote(te e% loro pro#%l%? e s(/l% str('et% )o % >(al% ess% possoo !e)%!ere
tal% 'o!al%t? p( a88e%re )&e l%!ea !% (a Q)o'(%tQ !es)r%tta e% ter'%%
sopra r%)&%a'at% #%%s)a per %!(rl% a r%8elare % 'o!o s)os%!erato
%#or'a,%o% persoal% )&e altr%'et% o s% las)ere77ero s#(//%re$ A)&e %
o'% !at% a tal(e !% >(este p%atta#or'e )o'e QMSpa)eQ? %l '%o spa,%o?
)reao (%!ea %ll(sor%a !% pr%8a) e r%ser8ate,,a s(l 1e7$
4$ QGrat%sQ o se'pre s%/%#%)a Qa )osto ,eroQ$ I realt? 'olt% !e% ser8%,% !%
so)%al et1or2 #ao Qpa/areQ /l% (tet% attra8erso %l r%(t%l%,,o !e% !at%)ote(t% e% pro#%l% persoal% !a parte !e% #or%tor% !% ser8%,%o? a! ese'p%o per
att%8%t '%rate !% 'ar2et%/$
$ La ra))olta !% !at% !% tra##%)o !a parte !e% #or%tor% !% ser8%,% !% so)%al
et1or2? % >(al% &ao /l% str('et% te)%)% per re/%strare o/% s%/olo passo
!ell(tete s(l loro s%to e? % (lt%'a aal%s%? )o'(%)are a ter,% !at% persoal% !%
*+
-
7/25/2019 Salucci Simone Tesi
13/58
tra##%)o )o'pres% /l% %!%r%,,% I"? )&e % tal(% )as% possoo r%)or!are % !at%
relat%8% all(7%)a,%oe$ C% p( a88e%re? a! ese'p%o? per #%al%t p(77l%)%tar%e?a)&e !% t%po '%rato$ S% osser8% )&e % 'olt% "aes% % !at% % o//etto !e8oo
essere )o'(%)at%? a r%)&%esta? a)&e alle a(tor%t /%(!%,%ar%e o !% pol%,%a eo a%
ser8%,% !% %tell%/e)e? o)& )o o/% pro7a7%l%t? % 7ase alle or'e es%stet%
% 'ater%a !% )oopera,%oe %tera,%oale? a so//ett% stra%er%$
9$ Il 7%so/o )res)ete !% #%a,%are % ser8%,% e r%)a8are pro#%tt% p( #(/ere !a
st%'olo (lter%ore per la ra))olta? %l tratta'eto e l(t%l%,,a,%oe !% !at% relat%8%
a/l% (tet%? tratta!os% !ell(%)o )esp%te patr%'o%ale !e% #or%tor% !% ser8%,%
!% so)%al et1or2$ I s%t% !% so)%al et1or2 o soo? )otrar%a'ete a >(ato
s(//er%to !al ter'%e Qso)%alQ? ( ser8%,%o p(77l%)o$ Daltra parte? %l 1e7 +$5
sta Q!%8eta!o a!(ltoQ e le p%))ole a,%e!e %#or'at%)&e /est%te? % )ert% )as%?
!a /r(pp% !% st(!et% 'eo %teressat% allaspetto #%a,%ar%o soo sost%t(%te
se'pre p%@ spesso !a /ra!% so//ett% !% resp%ro %tera,%oale$ T(tto >(esto
&a )a'7%ato % >(al)&e '%s(ra le re/ole !el /%o)o? 8%sto )&e 'olte !elle
%'prese !% )(% sopra soo >(otate % 7orsa e s(7%s)oo (a press%oe
#ort%ss%'a !a parte !e% r%spett%8% %8est%tor% ellott%)a !% real%,,are e
'ass%'%,,are pro#%tt%$
"o%)& per 'olt% #or%tor% !% >(est% ser8%,% % !at% )ote(t% e% pro#%l% !e/l%
(tet% e! %l ('ero !% (tet% es)l(s%8% )ost%t(%s)oo /l% (%)% 8er% 7e%
patr%'o%al% !% )(% !%spo/oo? possoo sor/ere r%s)&% (lter%or% per >(ato
r%/(ar!a la ra))olta? %l tratta'eto e l(t%l%,,o o propor,%oat% !e% !at%persoal% relat%8% a/l% (tet%$
=$ R%8elare p%@ %#or'a,%o% persoal% !% >(ato s% )re!a$ A! ese'p%o? le #oto
possoo tras#or'ars% % %!et%#%)ator% 7%o'etr%)% (%8ersal% all%tero !% (a
rete e! a)&e attra8erso p%@ ret%$ Ne/l% (lt%'% a% soo '%/l%orate % '%s(ra
ote8ole le presta,%o% !e% so#t1are !% r%)oos)%'eto !el 8olto? e r%s(ltat%
*4
-
7/25/2019 Salucci Simone Tesi
14/58
a)ora Q'%/l%or%Q arr%8erao % #(t(ro$ S% osser8% )&e? (a 8olta asso)%ato (
o'e a! (a #oto? possoo essere 'esse a r%s)&%o a)&e la pr%8a) e las%)(re,,a !% altr% pro#%l%-(tete? 'a/ar% 7asat% s(ll(so !% pse(!o%'% o
a!!%r%tt(ra !% !at% ao%'%$ Ioltre? lENISA? la/e,%a e(ropea per la
s%)(re,,a !elle ret% e !elle %#or'a,%o%? &a r%)&%a'ato latte,%oe s( (a
te)olo/%a e'er/ete CBIR? )otet-7ase! %'a/e retr%e8al )&e o##re (lter%or%
opport(%t !% lo)al%,,are /l% (tet% asso)%a!o /l% ele'et% %!et%#%)at%8% !%
!eter'%at% a'7%et% o l(o/&%? a! ese'p%o? ( !%p%to appeso % (a sta,a? o
( e!%#%)%o 8%s%7%le ell%''a/%e? a% !at% relat%8% all(7%)a,%oe$
I#%e? le #(,%o% !ette !% Q/ra#o so)%aleQ? 'olto !%##(se presso 8ar% ser8%,% !%
so)%al et1or2? !% #atto r%8elao %#or'a,%o% s(% rapport% %ter)orret% #ra %
s%/ol% (tet%$
.$ Ut%l%,,o %'propr%o !e% pro#%l% (tete !a parte !% so//ett% ter,%$ S% tratta
pro7a7%l'ete !el r%s)&%o pote,%ale p%@ /ra8e per >(ato r%/(ar!a % !at%
persoal% )ote(t% e% pro#%l% (tete !e% ser8%,% !% so)%al et1or2$ A se)o!a
!ella )o#%/(ra,%oe !%spo%7%le r%spetto alla pr%8a) e !ell(t%l%,,o o 'eo !%
tale )o#%/(ra,%oe !a parte !e/l% (tet%? o)& !el l%8ello !% s%)(re,,a o##erto
!al ser8%,%o? le %#or'a,%o% )ote(te el pro#%lo? )o'prese %''a/%%? )&e
possoo r%trarre s%a %l s%/olo %teressato? s%a altr% so//ett%? !%8etao
a))ess%7%l%? el pe//%ore !e% )as%? all%tera )o'(%t !e/l% (tet%$ Allo stesso
te'po? soo assa% s)arse le sal8a/(ar!%e o//% !%spo%7%l% r%spetto alla )op%a !e%
!at% )ote(t% e% pro#%l%-(tete e! al loro (t%l%,,o per )ostr(%re pro#%l%persoal% eo r%p(77l%)are tal% !at% al !% #(or% !ello spe)%#%)o ser8%,%o !% so)%al
et1or2$ T(tta8%a? a)&e l(t%l%,,o Qor'aleQ !e% !at% )ote(t% e% pro#%l%-
(tete p( %'pattare s(lla(to!eter'%a,%oe %#or'at%8a !e/l% (tet% e? a!
ese'p%o? %)%!ere /ra8e'ete s(lle loro poss%7%l%t !% )arr%era$ U ese'p%o )&e
&a s(s)%tato %teresse !%##(so r%/(ar!a la7%t(!%e !a parte !e% !%r%/et% !el
*
-
7/25/2019 Salucci Simone Tesi
15/58
persoale !% s%/ole so)%et !% )os(ltare % pro#%l%-(tete !e% )a!%!at%
allass(,%oe eo !e% !%pe!et%$Se)o!o >(ato r%#er%to !a art%)ol% !% sta'pa? /% o//% % !(e ter,% !e% !%r%/et%
a''ettoo !% (t%l%,,are % !at% r%)a8at% !a ser8%,% !% so)%al et1or2? a! ese'p%o
per 8er%#%)are eo )o'pletare % )(rr%)(la !e% )a!%!at%$ Altr% so//ett% )&e
possoo trarre pro#%tto !a >(este #ot% !% %#or'a,%oe soo le #or,e
!ellor!%e e % ser8%,% se/ret%$ Ioltre? al)(% #or%tor% !% ser8%,% !% so)%al
et1or2 #or%s)oo a ter,% !at% relat%8% a/l% (tet% tra'%te %ter#a))e !%
pro/ra''a,%oe !% appl%)at%8%? e % !at% #%%s)oo >(%!% per essere /est%t% !a%
so//ett% ter,% % >(est%oe$
3$ Il Gr(ppo !% la8oro (tre part%)olar% preo))(pa,%o% r%spetto al r%s)&%o
(lter%ore !% #(rt% !%!et%t )a(sat% !alla !%spo%7%l%t !%##(sa !% !at% persoal%
)ote(t% e% pro#%l%-(tete e !alla7(so !% tal% pro#%l% !a parte !% so//ett% ter,%
o a(tor%,,at%$
6$ Ut%l%,,o !% (%#rastr(tt(ra la )(% s%)(re,,a las)%a p(rtroppo 'olto a
!es%!erare$
S% 'olto parlato !ella o s%)(re,,a !% ret% e s%ste'% %#or'at%)%?
)o'pres% % ser8%,% 1e7$ Cas% re)et% % 'er%to r%/(ar!ao #or%tor% !% ser8%,%
'olto )oos)%(t% >(al% Fa)e7oo2? Fl%)2r? MSpa)e? Or2(t? e St(!%VZ$ E 8ero
)&e % #or%tor% !% ser8%,% &ao preso '%s(re atte a pote,%are la s%)(re,,a !e%
loro s%ste'%? 'a 'olto resta a)ora !a #are$ Allo stesso te'po? pro7a7%le
)&e % #(t(ro e'er/ao (o8e #alle ella s%)(re,,a !% >(est% s%ste'%? 'etre assa% %'pro7a7%le )&e s% possa 'a% )ose/(%re lo7%ett%8o !% (a s%)(re,,a
totale 8%sta la )o'pless%t !elle appl%)a,%o% so#t1are a >(al(>(e l%8ello !e%
ser8%,% Iteret$
*5$ I pro7le'% t(ttora %rr%solt% per >(ato )o)ere la s%)(re,,a !e% ser8%,%
Iteret )ost%t(%s)oo ( r%s)&%o (lter%ore )oesso all(t%l%,,o !e% ser8%,% !%
*9
-
7/25/2019 Salucci Simone Tesi
16/58
so)%al et1or2 e? % )ert% )as%? a('etao %l l%8ello )o'pless%8o !% r%s)&%o?
o88ero )o'portao Qs#('at(reQ !% r%s)&%o spe)%#%)&e !% >(esto t%po !% ser8%,%$I ( !o)('eto re)ete re!atto !alla ENISA E(ropea Net1or2 a!
I#or'at%o Se)(r%t A/e) 8e/oo )%tat%? #ra laltro? lo spa'? lo s)r%pt%/
#ra s%t% !%8ers%? 8%r(s e Q8er'%Q? %l p&%s&%/ '%rato spear-p&%s&%/ e #or'e !%
p&%s&%/ spe)%#%)&e !e% ser8%,% !% so)%al et1or2? l%#%ltra,%oe !ella rete?
l(t%l%,,o a7(s%8o !% pro#%l%-(tete pro#%le-s>(att%/ e atta))&% rep(ta,%oal%
7asat% s(l #(rto !% %!et%t? #or'e !% perse)(,%oe persoale stal2%/? %l
7(ll%s'o % rete? e lo sp%oa//%o %!(str%ale oss%a? % )os%!!ett% Qso)%al
e/%eer%/ atta)2sQ strate/%e 7asate s( %tera,%o% %terpersoal% #%al%,,ate a
)arp%re %#or'a,%o% r%ser8ate )o'p%(t% attra8erso % ser8%,% !% so)%al et1or2$
Se)o!o lENISA? ( r%s)&%o (lter%ore per la s%)(re,,a rappresetato Q!a%
#attor% !% a//re/a,%oe le/at% alle so)%al et1or2Q$
**$ L%tro!(,%oe !% sta!ar! !% %teropera7%l%t e %ter#a))e !%
pro/ra''a,%oe appl%)a,%o% A"I: a! ese'p%o? lo sta!ar! Qope so)%alQ
%tro!otto !a Goo/le el 'ese !% o8e'7re +55.? allo s)opo !% )oset%re
l%teropera7%l%t te)%)a !% ser8%,% !% so)%al et1or2 t%polo/%)a'ete !%8ers%?
)o'porta t(tta (a ser%e !% r%s)&% (lter%or%$
S% re!e %#att% poss%7%le (a 8al(ta,%oe a(to'at%)a !% t(tt% % s%t% !% so)%al
et1or2 )&e (t%l%,,%o lo sta!ar! pres)elto$ Attra8erso le A"I % prat%)a
l%tera /a''a !% #(,%oal%t !el s%ste'a a! essere pass%7%le !% 8al(ta,%oe
a(to'at%)a attra8erso l%ter#a))%a 1e7$ Le appl%)a,%o% pote,%al'ete %/ra!o !% %ter#er%re )o la pr%8a) !e/l% (tet% e #orse a)&e )o la pr%8a) !%
so//ett% )&e o soo (tet%? 'a % )(% !at% #a))%ao parte !% ( pro#%lo-(tete
)o'pre!oo? a! ese'p%o? laal%s% )o'pless%8a !e% rapport% pro#ess%oal% e
pr%8at% %tratte(t% !al s%/olo (tete? )&e p( se,altro tra8al%)are % Q)o#%%Q
!elle s%/ole so)%al et1or2 s(lle >(al% l(tete %tera/%s)e 8olta per 8olta %
*=
-
7/25/2019 Salucci Simone Tesi
17/58
r(ol% !%8ers%J %oltre? l%teropera7%l%t p( #a8or%re % '%s(ra (lter%ore %l
r%(t%l%,,o !a parte !% so//ett% ter,% !elle %#or'a,%o% e !elle %''a/%%)ote(te e% pro#%l%-(tete$
*.
-
7/25/2019 Salucci Simone Tesi
18/58
*3
-
7/25/2019 Salucci Simone Tesi
19/58
Capitolo (
*$attacco
U pa%o !% a% #a stato pro/ettato !a A!rea V%tal% * ( (o8o t%po !%
atta))o )&e '%ra a s#r(ttare % so)%al et1or2? % part%)olare le %#or'a,%o%
)ote(te !etro !% >(est%? per atta))are a)&e altr% s%ste'%$
I >(est% )ap%tolo 8%ee !es)r%tto >(esto t%po !% atta))o % t(tte le s(e #as%$
("1 *$al#oritmo e le +a%i dell$attacco
(attro soo le #as% !a att(are al #%e !% )o'pro'ettere l%tero s%ste'a
tele'at%)o:
*$ VIOLAZIONE SOCIAL et1or2: % >(esta #ase a!re'o a! otteere
%#or'a,%o% persoal% !e/l% (tet% !a (t%l%,,are )o'e ;/r%'al!ello< per
#or,are la))o(t !ella ;8%tt%'a(ell% !% pa/a'eto ol%e o e-)o''er)eJ
$ VIOLAZIONE ATTRAVERSO IL RINVIO DELLE CREDENZIALI: %
>(est(lt%'a #ase tetere'o !% 8%olare le '%s(re !% s%)(re,,a !% altr% s%t%
attra8erso %l r%8%o !elle )re!e,%al% !% a))esso per 'a%l$ (est(lt%'a #ase
o88%a'ete le/ata al s())esso !ella se)o!a$
*6
-
7/25/2019 Salucci Simone Tesi
20/58
La pr%'a #ase pre8e!e la )rea,%oe !% ( pro#%lo !al >(ale %%,%are a s#errarel0atta))oJ el /%ro !% )%>(ata /%or%? tale pro#%lo &a ra//%(to le 9$555
a'%)%,%e? %l l%'%te 'ass%'o %'posto !a Fa)e7oo2? a >(esto p(to stato
poss%7%le !are %%,%o all0atta))o 8ero e propr%o$
I >(esta #ase /ra,%e alle A"I !% Fa)e7oo2 stato poss%7%le reper%re e
'e'or%,,are % ( !ata7ase la l%sta !e/l% a'%)% )o t(tte le %#or'a,%o%
asso)%ate a! ess%$
D% se/(%to r%port%a'o al)(e !elle %#or'a,%o% )&e Fa)e7oo2 'ette a
!%spos%,%oe:
(%! - T&e (ser ID )orrespo!%/ to t&e (ser %#o ret(re!$ T&%s %s al1as
ret(re!? 1&et&er %)l(!e! % #%el!s or ot? a! al1as as t&e #%rst
s(7ele'et$
a7o(t'e - tet ele'et )orrespo!%/ to Fa)e7oo2 A7o(t M pro#%le
se)t%o$ Ma 7e 7la2$
a)t%8%t%es - User-etere! QA)t%8%t%esQ pro#%le #%el!$ No /(aratee! #or'att%/$
a##%l%at%os - l%st o# et1or2 a##%l%at%os? as a##%l%at%o ele'ets? ea)& o# 1&%)&
)ota% ear? tpe? stat(s? a'e? a! %! )&%l! ele'ets$ I# o a##%l%at%os
are ret(re!? t&%s ele'et 1%ll 7e 7la2$ T&e (sers pr%'ar et1or2 2e:
%! 1%ll 7e l%ste! #%rst$
P tpe ta2es t&e #ollo1%/ 8al(es: )olle/e: )olle/e et1or2 &%/&s)&ool: &%/& s)&ool et1or2 1or2: 1or2 et1or2 re/%o:
/eo/rap&%)al et1or2
P ear 'a 7e 7la2? !epe!%/ o t&e et1or2 tpe$
P a'e %s t&e a'e o# t&e et1or2$
P %! %s a (%>(e %!et%#%er #or t&e et1or2$ T&e (ser-to-et1or2 relat%o
+5
-
7/25/2019 Salucci Simone Tesi
21/58
'a 7e store!$
P stat(s !es)r%7es t&e (sers /ra!(ate stat(s %# t&e et1or2 %s a )olle/eet1or2$ Ot&er1%se? %t %s 7la2$
7%rt&!a - User-etere! QB%rt&!aQ pro#%le #%el!$ No /(aratee! #or'att%/
as %ts 7ase! o t&e (sers lo)ale$ Use 7%rt&!a!ate %stea! o# o( ee!
to 7e s(re o# t&e #or'at$
7%rt&!a!ate - T&e (sers 7%rt&!a? re!ere! as a 'a)&%e-rea!a7le
str%/$ T&e #or'at o# t&%s !ate e8er )&a/es$
7oo2s - User-etere! QFa8or%te Boo2sQ pro#%le #%el!$ No /(aratee!
#or'att%/$
)ota)te'a%l - %s a str%/ )ota%%/ t&e (sers pr%'ar Fa)e7oo2 e'a%l
a!!ress$ I# t&e (ser s&are! &%s or &er pr%'ar e'a%l a!!ress 1%t& o(? t&%s
a!!ress also appears % t&e e'a%l #%el! see 7elo1$
)(rretlo)at%o - User-etere! QC(rret Lo)at%oQ pro#%le #%el!s$ Cota%s
#o(r )&%l!re: )%t? state? )o(tr? a! ,%p$
P )%t %s (ser-etere!? a! 'a 7e 7la2$
P state %s a 1ell-!e#%e! a'e o# t&e state? a! 'a 7e 7la2$
P )o(tr %s 1ell-!e#%e!? a! 'a 7e 7la2$
P ,%p %s a %te/er? a! %s 5 %# (spe)%#%e! 7 t&e (ser$
e!()at%o&%stor - l%st o# s)&ool %#or'at%o? as e!()at%o%#o ele'ets?
ea)& o# 1&%)& )ota% a'e? ear? a! )o)etrat%o )&%l! ele'ets$ I# o
s)&ool %#or'at%o %s ret(re!? t&%s ele'et 1%ll 7e 7la2$P ear %s a #o(r-!%/%t ear? a! 'a 7e 7la2$
P a'e %s t&e a'e o# t&e s)&ool? a! %s (ser-spe)%#%e!$
P )o)etrat%os %s a l%st o# )o)etrat%o ele'ets? a! 'a 7e a
e'pt l%st$
P !e/ree %s t&e a'e o# t&e !e/ree? a! 'a 7e 7la2$
+*
-
7/25/2019 Salucci Simone Tesi
22/58
e'a%l %s a str%/ )ota%%/ t&e (sers pr%'ar Fa)e7oo2 e'a%l a!!ress or
t&e (sers pro%e! e'a%l a!!ress? 1&%)&e8er a!!ress t&e (ser /rate! o(rappl%)at%o$
#a'%l %s a arra )ota%%/ t&e (sers #a'%l 'e'7ers? l%st%/ t&e (ser
ID a! relat%os&%p #or ea)& 'e'7er$
&asa!!e!app - Depre)ate! Bool 5 or * %!%)at%/ 1&et&er t&e
(ser &as a(t&or%,e! t&e appl%)at%o$ T&%s 8al(e %s o1 e>(%8alet to
%sapp(ser$
&o'eto1lo)at%o - User-etere! QHo'eto1Q pro#%le #%el!s$ Cota%s
t&ree )&%l!re: )%t? state? a! )o(tr$
P )%t %s (ser-etere!? a! 'a 7e 7la2
P state %s a 1ell-!e#%e! a'e o# t&e state? a! 'a 7e 7la2$
P )o(tr %s 1ell-!e#%e!? a! 'a 7e 7la2$
&s%#o - User-etere! &%/& s)&ool %#or'at%o$ Cota%s #%8e )&%l!re:
&s*a'e? &s+a'e? /ra!ear? &s*2e? a! &s+2e$
P &s*a'e %s 1ell-!e#%e!? a! 'a 7e le#t 7la2
P &s+a'e %s 1ell-!e#%e!? a! 'a 7e le#t 7la2? t&o(/& 'a ot
&a8e %#or'at%o %# &s*a'e %s 7la2$
P /ra!ear %s a #o(r-!%/%t ear? or 'a 7e 7la2
P &s*%! %s a (%>(e ID represet%/ t&at s)&ool? a! %s ot ,ero %# a!
ol %# &s*a'e %s ot 7la2$
P &s+%! %s a (%>(e ID represet%/ t&at s)&ool? a! %s ot ,ero %# a!ol %# &s+a'e %s ot 7la2$
%terests - User-etere! QIterestsQ pro#%le #%el!$ No /(aratee! #or'att%/$
%sapp(ser - Bool 5 or * %!%)at%/ 1&et&er t&e (ser &as (se! t&e
)all%/ appl%)at%o$
%s7lo)2e! - Bool t&at ret(rs tr(e %# t&e (ser %s 7lo)2e! to t&e 8%e1er
++
-
7/25/2019 Salucci Simone Tesi
23/58
lo//e! % (ser$ T&e (ser '(st 7e lo//e! % or o( '(st &a8e a 8al%!
sess%o 2e to /et t&%s 8al(e$ lo)ale - T&e )(rret lo)ale % 1&%)& t&e (ser &as )&ose to 7ro1se Fa)e7oo2$
T&e 7as%) #or'at %s LLCC? 1&ere LL %s a t1o-letter la/(a/e )o!e? a!
CC %s a t1o-letter )o(tr )o!e$ Co(tr )o!es are ta2e #ro' t&e ISO
4*== alp&a + )o!e l%st$ For %sta)e? eUS represets US E/l%s&$
'eet%/#or - l%st o# !es%re! relat%os&%p tpes )orrespo!%/ to t&e QLoo2%/
ForQ pro#%le ele'et$ I# o relat%os&%p tpes are spe)%#%e!? t&e 'eet%/
#or ele'et %s e'pt$ Ot&er1%se represete! as a l%st o# see2%/ )&%l!
tet ele'ets? 1&%)& 'a ea)& )ota% oe o# t&e #ollo1%/ str%/s:
Fr%e!s&%p?
A Relat%os&%p? Dat%/? Ra!o' "la? &ate8er I )a /et$
'eet%/se - l%st o# !es%re! relat%os&%p /e!ers )orrespo!%/ to t&e
QItereste! IQ pro#%le ele'et$ I# o relat%os&%p /e!ers are spe)%#%e!?
t&e 'eet%/se ele'et %s e'pt$ Ot&er1%se represete! as a l%st o# se
)&%l! tet ele'ets? 1&%)& 'a ea)& )ota% oe o# t&e #ollo1%/ str%/s:
'ale? #e'ale $
'o8%es - User-etere! QFa8or%te Mo8%esQ pro#%le #%el!$ No /(aratee!
#or'att%/$
'(s%) - User-etere! QFa8or%te M(s%)Q pro#%le #%el!$ No /(aratee!
#or'att%/$
Wa'e - User-etere! QNa'eQ pro#%le #%el!$ Ma ot 7e 7la2$P #%rsta'e %s /eerate! #ro' t&e (ser-etere! QNa'eQ pro#%le #%el!$
P '%!!lea'e %s /eerate! #ro' t&e (ser-etere! QNa'eQ pro#%le #%el!$
P lasta'e - T&e (sers last a'e? 1&%)& %s /eerate! #ro' t&e (seretere!
QNa'eQ pro#%le #%el!$
otes)o(t - Total ('7er o# otes 1r%tte 7 t&e (ser$
+4
-
7/25/2019 Salucci Simone Tesi
24/58
p%) - URL o# (ser pro#%le p%)t(re? 1%t& 'a 1%!t& *55p a! 'a &e%/&t
455p$ Ma 7e 7la2$ p%)1%t&lo/o - URL o# (ser pro#%le p%)t(re 1%t& a Fa)e7oo2 lo/o o8erla%!?
1%t& 'a 1%!t& *55p a! 'a &e%/&t 455p$ Ma 7e 7la2$
p%)7%/ - URL o# (ser pro#%le p%)t(re? 1%t& 'a 1%!t& +55p a! 'a
&e%/&t =55p$ Ma 7e 7la2$
p%)s'all - URL o# (ser pro#%le p%)t(re? 1%t& 'a 1%!t& 95p a! 'a
&e%/&t *95p$ Ma 7e 7la2$
p%)s'all1%t&lo/o - URL o# (ser pro#%le p%)t(re 1%t& a Fa)e7oo2 lo/o
o8erla%!? 1%t& 'a 1%!t& 95p a! 'a &e%/&t *95p$ Ma 7e 7la2$
p%)s>(are - URL o# a s>(are se)t%o o# t&e (ser pro#%le p%)t(re? 1%t& 1%!t&
95p a! &e%/&t 95p$ Ma 7e 7la2$
p%)s>(are1%t&lo/o - URL o# a s>(are se)t%o o# t&e (ser pro#%le p%)t(re
1%t& a Fa)e7oo2 lo/o o8erla%!? 1%t& 1%!t& 95p a! &e%/&t 95p$ Ma 7e
7la2$
pol%t%)al - User-etere! Q"ol%t%)al V%e1Q pro#%le #%el!$ Its a #ree-#or' tet
#%el!$
pro#%le7l(r7 - A #ree-#or' tet #%el! (!er a (sers pro#%le p%)t(re$
pro#%le(p!atet%'e - T%'e % se)o!s s%)e epo)& t&at t&e (sers pro#%le
1as last (p!ate!$ I# t&e (sers pro#%le 1as ot (p!ate! 1%t&% t&e past 4
!as? 5 %s ret(re!$
pro#%le(rl - URL o# t&e Fa)e7oo2 pro#%le o# t&e (ser$ I# t&e (ser &asspe)%#%e! a (sera'e? t&e (sera'e %s %)l(!e! % t&e URL? ot pro#%le$
p&pX%!YUID$
pro%e!e'a%l - A pro%e! 1rapper alterat%8e #or )ota)t%/ t&e (ser
t&ro(/& e'a%l? %stea! o# !%re)tl )all%/ ot%#%)at%os$se!E'a%l$ I# t&e
(ser s&are! &%s or &er pro%e! e'a%l a!!ress 1%t& o(? t&%s a!!ress also
+
-
7/25/2019 Salucci Simone Tesi
25/58
appears % t&e e'a%l #%el! see 7elo1$
>(otes - User-etere! QFa8or%te (otesQ pro#%le #%el!$ No /(aratee!#or'att%/$
relat%os&%pstat(s - User-etere! QRelat%os&%p Stat(sQ pro#%le #%el!$ Is
e%t&er 7la2 or oe o# t&e #ollo1%/ str%/s: S%/le? I a Relat%os&%p? I
a Ope Relat%os&%p? E/a/e!? Marr%e!? Its Co'pl%)ate!? %!o1e!$
rel%/%o - User-etere! QRel%/%o(s V%e1sQ pro#%le #%el!$ No /(aratee!
#or'att%/$
se - User-etere! QSeQ pro#%le #%le$ T&%s %s a traslate! str%/? so t&e
/e!er ret(re! !epe!s o t&e (sers lo)ale$ T&%s #%el! 'a 7e 7la2$
s%/%#%)atot&er%! - t&e %! o# t&e perso t&e (ser %s % a relat%os&%p 1%t&$
Ol s&o1 %# 7ot& people % t&e relat%os&%p are (sers o# t&e appl%)at%o
'a2%/ t&e re>(est$
stat(s - Cota%s a Q'essa/eQ )&%l! 1%t& (ser-etere! stat(s %#or'at%o?
as 1ell as a Qt%'eQ )&%l! 1%t& t&e t%'e % se)o!s s%)e epo)& at 1&%)&
t&e stat(s 'essa/e 1as set$
t%'e,oe - o##set #ro' GMT e$/$ Cal%#or%a %s -3$
t8 - User-etere! QFa8or%te TV S&o1sQ pro#%le #%el!$ No /(aratee!
#or'att%/$
(sera'e - T&e (sers Fa)e7oo2 (sera'e? %# oe 1as spe)%#%e!$ Ot&er1%se?
t&%s #%el! %s 7la2$
1all)o(t - Total ('7er o# posts to t&e (sers 1all$ Notet&at t&%s !oes ot %)l(!e %te's 1%t& atta)&'ets? %$e$ 1all p&otos?
1all 8%!eos? poste! l%2s? et)$ Ol %te's t&at s&o1 (p o
&ttp:111$Fa)e7oo2$)o'1all$p&p are %)l(!e! % t&%s )o(t$
1e7s%te - User-etere! persoal 1e7s%te pro#%le #%el!$ No /(aratee!
#or'att%/$
+9
-
7/25/2019 Salucci Simone Tesi
26/58
1or2&%stor - l%st o# 1or2 &%stor %#or'at%o? as 1or2%#o ele'ets?
ea)& o# 1&%)& )ota% lo)at%o? )o'paa'e? pos%t%o? !es)r%pt%o?start!ate a! e!!ate )&%l! ele'ets$ I# o 1or2 &%stor %#or'at%o
%s ret(re!? t&%s ele'et %s 7la2$
P lo)at%o %s (ser-etere!? a! &as a s%'%lar #or'at to )(rretlo)at%o
a! &o'eto1lo)at%o a7o8e$
P )o'paa'e %s (ser-etere!? a! !oes ot e)essar%l )orrespo!
to a Fa)e7oo2 1or2 et1or2$
P !es)r%pt%o %s (ser-etere!? a! 'a 7e 7la2$
P pos%t%o %s (ser-etere!? a! 'a 7e 7la2$
P start!ate %s o# t&e #or' -MM? ? or MM$ It 'a 7e
7la2$
P e!!ate %s o# t&e #or' -MM? ? or MM$ It 'a 7e 7la2$
Ua 8olta ra))olte t(tte le %#or'a,%o% s(/l% (tet% s% passa all0%!%8%!(a,%oe
!elle )re!e,%al% !% a))esso? 8errao %#att% e##ett(at% #%o a! otto tetat%8% per
o/% ;a'%)o
-
7/25/2019 Salucci Simone Tesi
27/58
)%r)a l03 !elle pass1or!? al ter'%e !ella pro8a ese/(%ta s( ( )a'p%oe !%
*55 %!%8%!(%? >(esta te)%)a &a portato alla s)operta !el * !elle pass1or!$"er o/% a))o(t 8%olato >(esta opera,%oe 8%ee r%pet(ta r%)ors%8a'ete$
Nello s)&e'a se/(ete 8%ee 'ostrata (0aal%s% !ella poss%7%le espas%oe
!ell0al/or%t'o$
"arte!o !a ( (tete )o *555 a'%)%? )os%!era!o la per)et(ale !%
pass1or! tro8ate !el = e %pot%,,a!o )&e o/% (tete )olp%to a77%a a s(a
8olta (a 'e!%a !% *45 a'%)%? lo s)&e'a se/(ete aal%,,a la poss%7%le
espas%oe !ell0atta))o$
L0%''a/%e sottostate 'ostra /ra#%)a'ete l0espas%oe !% >(esto atta))o$
+.
Tabella 3.1.2: #nalisi statistica espansione
-
7/25/2019 Salucci Simone Tesi
28/58
Ter'%ata >(esta #ase s% passa alla 8%ola,%oe !ell0a))o(t !% posta )o'e%ll(strato !a A!rea V%tal%*:
U 'eto!o 'olto !%##(so? 'a a)&e 'olto r%s)&%oso? >(ello !% (t%l%,,are la
stessa pass1or! per ser8%,% ol%e !%##eret%$
*$ "er o/% a))o(t 8%olato: pro8are la stessa pass1or! per /l% a))o(t 'a%l
oltre %l =* !% s())esso
+$ Ua 8olta a8(to la))esso e##ett(are opera,%o% !% r%)er)a all%tero !ella
)asella 'a%l post r%)e8(ta %8%ata )est%ata alla r%)er)a !% )re!e,%al% !%
a))esso? ('er% !% )arte? 7a2 a))o(t? 'a%l )o'pro'ettet%? et)
Ua !%##(sa )att%8a a7%t(!%e !e/l% %tal%a% >(ella !% ar)&%8%are elle propr%e
'a%l pass1or! !% altr% s%ste'%$
Nella ter,a #ase s% passer alla 8%ola,%oe !% altr% s%ste'%:
+3
Figura 3.1.3: Grafico i espansione
-
7/25/2019 Salucci Simone Tesi
29/58
"er o/% a))o(t 8%olato: pro8are la stessa p1! per a))o(t papal? e7a? altr%
s%t%$ Se)o!o (o st(!%o !ella S'ate)? la 'a//%or parte !e% )l%et% 7a)ar%ol%e r%(t%l%,,a le propr%e )re!e,%al% per a))e!ere a s%t% 1e7 'olto 'eo
s%)(r%$ U (o8o report !% Tr(steer r%8ela )&e soo 'olte le persoe a
r%(t%l%,,are le stesse pass1or! e (sera'e$ Il report r%8ela !at% a !%r po)o
%>(%etat%:
"ass1or! S&ar%/: %l .4 !e/l% (tet% r%(t%l%,,ao la pass1or! !% a))esso al
propr%o ser8%,%o !% 7a2%/ ol%e % s%t% o #%a,%ar%$
User ID S&ar%/: (a!o (a 7a)a )osete la s)elta !el propr%o (ser %!? %l
=9 !e/l% (tet% r%(t%l%,,a lo stesso (sera'e % s%t% o #%a,%ar%J el )aso
% )(% la 7a)a asse/% a(to'at%)a'ete ( o'e (tete? 8err r%(t%l%,,ato
!all(tete %l + !e/l% (tet% al'eo % ( s%to o #%a,%ar%o$
User ID a! "ass1or! S&ar%/: . !e/l% (tet% r%(t%l%,,a % propr% (sera'e
e pass1or! !% a))esso alla 7a)a s( s%t% o #%a,%ar%
Ua 8olta a)>(%s%to lo/% e pass1or! 8e/oo testat% s( s%t% !% ser8%,%
#%a,%ar% per )o''ettere #ro!%$ Ut%l%,,are le )re!e,%al% r(7ate resta %l 'o!o
p%@ se'pl%)e per a//%rare le '%s(re !% s%)(re,,a att(ate !alle 7a)&e per
prote//ere le loro appl%)a,%o%$
Nella >(arta e! (lt%'a #ase s% pro88e!er al r%8%o !elle pass1or!: r%)&%e!ere
l%8%o !% pass1or! per e'a%l attra8erso la #(,%oal%t !% ;"ass1or! #or/et
-
7/25/2019 Salucci Simone Tesi
30/58
45
-
7/25/2019 Salucci Simone Tesi
31/58
Capitolo ,
O-ietti.i
Lo s)opo !% >(esta tes% 8al(tare se l0al/or%t'o presetato el +5*5 !a A!rea
V%tal% ella tes% ;L0** sette'7re tele'at%)o< s%a 8al%!o a)ora o//% o se !opo
!(e a% le a7%t(!%% !e/l% (tet% % a'7%to !% s%)(re,,a !elle pass1or!? le
(o8e te)olo/%e e le (o8e pol%t%)&e % a'7%to !% s%)(re,,a e pr%8a) !%
Fa)e7oo2 o per'ettao p%@ !% (t%l%,,are >(esto al/or%t'o$
I part%)olare 8err aal%,,ata la pr%'a #ase !ell0atta))o? oss%a la #ase % )(%
8e/oo ra))olte le %#or'a,%o% !e/l% ;a'%)%< s( Fa)e7oo2 e s% teta !%
%'possessars% !e% loro a))o(t$
(esta la #ase p%@ %'portate !al 'o'eto )&e le tre soo s(7or!%e al
s())esso !ella pr%'a$
Dopo a8ere 8al(tato la 8al%!%t !% >(esto t%po !% atta))o s% 8al(ter a)&e (
e8et(ale 'eto!o per '%/l%orare le presta,%o% !ell0al/or%t'o aal%,,ato$
4*
-
7/25/2019 Salucci Simone Tesi
32/58
4+
-
7/25/2019 Salucci Simone Tesi
33/58
Capitolo
Valta!ioni
"1 *a comple%%it delle pa%%&ord
Se)o!o /l% st(!% ese/(%t% pr%'a !% testare l0al/or%t'o % esa'e? r%s(lta8a )&el03 !elle pass1or! era #a)%l'ete %!%8%!(a7%le pro8a!o pr%'a se'pl%)%
pass1or! 7aal% po% (t%l%,,a!o pass1or! '%rate % 7ase a% !at% ra))olt% s(%
so)%al et1or2J % part%)olare %l !ato (t%l%,,ato % >(esta #ase era la !ata !%
as)%ta )&e? )o)ateata % !%8ers% 'o!% )o l0(sera'e? !a8a or%/%e alle
pass1or! !a testare$
Dopo la pro8a s( ( )a'p%oe !% *55 (tet% real%? la per)et(ale r%s(lta8a
pess%'%st%)a % >(ato l0al/or%t'o a8e8a portato alla s)operta !el * !elle
pass1or!$
Aal%,,a!o art%)ol% s(lla s%)(re,,a p(77l%)at% e/l% (lt%'% a% r%s(lta )&e la
per)et(ale !% pass1or! 7aal% #a)%l'ete r%tra))%a7%l% )o l0al/or%t'o
!es)r%tto se'pre !ell03 )%r)a$
Nel +5*+ al)(% &a)2er &ao reso p(77l%)&e le pass1or! !% 'olt% (tet%
%s)r%tt% a 8ar% s%t% tra )(% a&oo 8o%)e? L%2e!%? eHar'o e Last$#'J /ra,%e a
>(est% !at% ;Splas&Data
-
7/25/2019 Salucci Simone Tesi
34/58
"rose/(e!o % >(esta aal%s%? ell0art%)olo4 ;T&e ps)&olo/ o# Se)(r%t #or
t&e Ho'e Co'p(ter User
-
7/25/2019 Salucci Simone Tesi
35/58
Mart% De8%llers? % )(% 8e/oo st(!%ate le pass1or! !% 4+ '%l%o% !% (tet%
r(7ate !a ( &a)2er el +556 !al !ata7ase !% Ro)2o(? 8e!%a'o (o8a'ete)o'e /l% (tet% (t%l%,,%o pass1or! po)o s%)(re$
Le pass1or! !% >(esto s%to erao state sal8ate % )&%aro el !ata7ase? se,a
al)(a #(,%oe !% &as& e /ra,%e a >(esto stato poss%7%le ese/(%re
(0a))(rata aal%s%$
G(ar!a!o %l /ra#%)o sottostate poss%7%le otare )&e la 'a//%or parte !elle
pass1or! soo )ost%t(%te !a )aratter% '%(s)ol%? ('er% o se'pl%)%
)o)atea,%o% !% >(est% !(e? 'etre le pass1or! )os%!erate p%@ ;ro7(ste(este pass1or! )o le l%ste !elle pass1or! p%@ )o'(% s%
otte/oo r%s(ltat% %teressat%: % 'e!%a o/% *55 pass1or! (a )ost%t(%ta
!alla pass1or! ;*+49=
-
7/25/2019 Salucci Simone Tesi
37/58
>(ale st%a'o )er)a!o la pass1or! e % tal )aso %ser%re ella l%sta !elle
pass1or! !a testare le pass1or! )&e &a /% (t%l%,,ato s( altr% s%t% 1e7$I r%s(ltat% otte(t% potre77ero essere )os%!erat% 7(o%$
Le pol%t%)&e !% s)elta !ella pass1or! !% Fa)e7oo2 o soo !% a%(to alla
s%)(re,,a? %#att% /l% (%)% l%'%t% )&e 8e/oo !at% a% (o8% %s)r%tt% soo )&e la
pass1or! s)elta s%a !% al'eo = )aratter% e )&e >(est% o s%ao t(tt% (/(al%J
o77l%/a!o %8e)e l0(tete? al 'o'eto !ell0%s)r%,%oe? a! %ser%re (a
pass1or! )o )aratter% al#a('er%)% s%a 'a%(s)ol% )&e '%(s)ol%? ('er% e
)aratter% spe)%al%? ( atta))o )o'e >(ello aal%,,ato sare77e )o'pleta'ete
%e##%)a)e$
"2 *e no.e API e il pro-lema dell$email
Le (o8e %'posta,%oe !% Fa)e7oo2 &ao reso l0e'a%l !e/l% ;a'%)%< ( !ato
as)osto a 'eo )&e l0(tete o spe)%#%)&% )&e 8(ole re!erlo p(77l%)o$
(esta (o8a pol%t%)a )rea !e% ser% pro7le'% all0al/or%t'o per)& le A"I o
per'ettoo p%@ !% otteere l0%!%r%,,o e-'a%l !e/l% ;a'%)%
-
7/25/2019 Salucci Simone Tesi
38/58
name T&e (ser0s #(ll a'eNo access_tokenre>(%re!
first_name T&e (ser0s #%rst a'eNo access_tokenre>(%re!
middle_name T&e (ser0s '%!!le a'eNo access_tokenre>(%re!
last_name T&e (ser0s last a'eNo access_tokenre>(%re!
gender T&e (ser0s /e!er: femaleor maleNo access_token
re>(%re!
locale T&e (ser0s lo)aleNo access_tokenre>(%re!
languages T&e (ser0s la/(a/es user_likes
linkT&e URL o# t&e pro#%le #or t&e (sero Fa)e7oo2
No access_tokenre>(%re!
username T&e (ser0s Fa)e7oo2 (sera'eNo access_tokenre>(%re!
age_range
T&e (ser0s a/e ra/eJ ol ret(re! %#spe)%#%)all re>(este! 8%a t&e fieldsURL para'eter
Re>(%resaccess_token
third_party_id
A ao'o(s? 7(t (%>(e %!et%#%er#or t&e (serJ ol ret(re! %#spe)%#%)all re>(este! 8%a t&e fieldsURL para'eter
Re>(%resaccess_token
installed
Spe)%#%es 1&et&er t&e (ser &as%stalle! t&e appl%)at%o asso)%ate!1%t& t&e app a))ess to2e t&at %s (se!to 'a2e t&e re>(estJ ol ret(re! %#spe)%#%)all re>(este! 8%a t&e fieldsURL para'eter
Re>(%res appaccess_token
timezone T&e (ser0s t%'e,oe o##set #ro' UTCA8a%la7le ol #or t&e)(rret (ser
updated_timeT&e last t%'e t&e (ser0s pro#%le 1as(p!ate!J )&a/es to t&e languages?
Re>(%resaccess_token
43
-
7/25/2019 Salucci Simone Tesi
39/58
link? timezone? verified?interested_in?favorite_athletes?favorite_teams? a!video_upload_limits are ot otre#le)te! % t&%s 8al(e
verifiedT&e (ser0s a))o(t 8er%#%)at%o stat(s?e%t&er trueor falsesee 7elo1
Re>(%resaccess_token
bio T&e (ser0s 7%o/rap& user_about_me orfriends_about_me
birthday T&e (ser0s 7%rt&!a user_birthday orfriends_birthday
cover
T&e (ser0s )o8er p&oto '(st 7eepl%)%tl re>(este! (s%/fields=coverpara'eter
Re>(%resaccess_token
currency
T&e (ser0s )(rre) sett%/s '(st 7eepl%)%tl re>(este! (s%/ afields=currencyURL para'eter
Re>(%resaccess_token
devices A l%st o# t&e (ser0s !e8%)es 7eo!!es2top
User access_token
re>(%re!J ola8a%la7le #or #r%e!so# t&e )(rret (ser
education A l%st o# t&e (ser0s e!()at%o &%stor
user_education_his
tory orfriends_education_history
emailT&e pro%e! or )ota)t e'a%l a!!ress/rate! 7 t&e (ser
email
hometown T&e (ser0s &o'eto1 user_hometown orfriends_hometown
interested_in T&e /e!ers t&e (ser %s %tereste! %
user_relationship_
details orfriends_relationship_details
location T&e (ser0s )(rret )%t user_location orfriends_location
46
-
7/25/2019 Salucci Simone Tesi
40/58
political
T&e (ser0s pol%t%)al 8%e1
user_religion_poli
tics orfriends_religion_politics
payment_pricepointsT&e pa'et pr%)e-po%ts a8a%la7le#or t&at (ser
User access_token
favorite_athletes
T&e (ser0s #a8or%te at&letesJ t&%s #%el!%s !epre)ate! a! 1%ll 7e re'o8e! %t&e ear #(t(re
user_likes orfriends_likes
favorite_teams
T&e (ser0s #a8or%te tea'sJ t&%s #%el! %s!epre)ate! a! 1%ll 7e re'o8e! %
t&e ear #(t(re
user_likes or
friends_likes
picture
T&e URL o# t&e (ser0s pro#%le p%)ol ret(re! %# o( epl%)%tlspe)%# a 0#%el!sYp%)t(re0 para'
access_token
re>(%re! #or pa/es1%t&1&%tel%st%/tar/et%/restr%)t%os? ot&er1%seo access_tokenre>(%re!
quotes T&e (ser0s #a8or%te >(otes user_about_me orfriends_about_me
relationship_status
T&e (ser0s relat%os&%p stat(s:Single? In a relationship?Engaged? Married? Itscomplicated? In an openrelationship? !idowed?Separated? "ivorced? In a civilunion? In a domesticpartnership
user_relationships
orfriends_relationships
religion T&e (ser0s rel%/%o
user_religion_poli
tics orfriends_religion_p
olitics
security_settings
I#or'at%o a7o(t se)(r%t sett%/sea7le! o t&e (ser0s a))o(t '(st
7e epl%)%tl re>(este! (s%/ afields=security_settings URL
para'eter
A8a%la7le ol #or t&e)(rret (ser
5
-
7/25/2019 Salucci Simone Tesi
41/58
significant_other T&e (ser0s s%/%#%)at ot&er
user_relationships
orfriends_relationships
video_upload_limits
T&e s%,e o# t&e 8%!eo #%le a! t&ele/t& o# t&e 8%!eo t&at a (ser )a(ploa!J ol ret(re! %# spe)%#%)allre>(este! 8%a t&e fields URL
para'eter
Re>(%resaccess_token
websiteT&e URL o# t&e (ser0s persoal1e7s%te
user_website orfriends_website
work A l%st o# t&e (ser0s 1or2 &%stor
user_work_history
orfriends_work_history
E le se/(et% )oess%o%:
ame e%cription Permi%%ion%
a))o(tsT&e Fa)e7oo2 apps a! pa/es o1e! 7 t&e)(rret (ser$
manage_pages %el!saccess_tokens t&at)a 7e (se! to >(ert&e Grap& A"I o
7e&al# o# t&e apppa/e
a)&%e8e'ets T&e a)&%e8e'ets #or t&e (ser$
user_games_activi
ty orfriends_games_act
ivity$
a)t%8%t%es T&e a)t%8%t%es l%ste! o t&e (ser0s pro#%le$user_activities orfriends_activities$
al7('s T&e p&oto al7('s t&%s (ser &as )reate!$ user_photos or
friends_photos$
appre>(ests T&e (ser0s o(tsta!%/ re>(ests #ro' a app$Re>(%res appaccess_token$
7oo2s T&e 7oo2s l%ste! o t&e (ser0s pro#%le$ user_likes or
*
https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Faccountshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Factivitieshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Falbumshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fbookshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Factivitieshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Falbumshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fbookshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Faccounts -
7/25/2019 Salucci Simone Tesi
42/58
friends_likes$
)&e)2%s T&e pla)es t&at t&e (ser &as )&e)2e!-%to$ user_checkins orfriends_checkins $
e8ets T&e e8ets t&%s (ser %s atte!%/$ user_events or
friends_events$
#a'%l T&e (ser0s #a'%l relat%os&%ps user_relationships
$
#ee! T&e (ser0s 1all$ read_stream
#r%e!l%sts T&e (ser0s #r%e! l%sts$ read_friendlists$
#r%e!re>(ests T&e (ser0s %)o'%/ #r%e! re>(ests$ user_requests$
#r%e!s T&e (ser0s #r%e!s$A 8al%!access_token o# t&e)(rret sess%o (ser$
/a'esGa'es t&e (ser &as a!!e! to t&e Arts a!Eterta%'et se)t%o o# t&e%r pro#%le$
user_likes
/ro(ps T&e Gro(ps t&at t&e (ser 7elo/s to$ user_groups or
friends_groups$
&o'e T&e (ser0s e1s #ee!$ read_stream$
%7o T&e T&rea!s % t&%s (ser0s %7o$ read_mailbo#$
%terests T&e %terests l%ste! o t&e (ser0s pro#%le$ user_interests or
friends_interests$
l%2es All t&e pa/es t&%s (ser &as l%2e!$ user_likes or
friends_likes$
l%2s T&e (ser0s poste! l%2s$ read_stream$
lo)at%os
"osts? stat(ses? a! p&otos % 1&%)& t&e (ser&as 7ee ta//e! at a lo)at%o? or 1&ere t&e(ser &as a(t&ore! )otet %$e$ t&%s e)l(!eso7[e)ts 1%t& o lo)at%o %#or'at%o? a!o7[e)ts % 1&%)& t&e (ser %s ot ta//e!$ See!o)('etat%o o# t&e location_post ta7le#or 'ore !eta%le! %#or'at%o o
per'%ss%os$
user_photos?friend_photos?user_status?friends_status?user_checkins? orfriends_checkins $
+
https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fcheckinshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Feventshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffamilyhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffeedhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffriendlistshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fgameshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fgroupshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Finboxhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Finterestshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Flinkshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Flocationshttps://developers.facebook.com/docs/reference/fql/location_post/https://developers.facebook.com/docs/reference/fql/location_post/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fcheckinshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Feventshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffamilyhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffeedhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffriendlistshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fgameshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fgroupshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Finboxhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Finterestshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Flinkshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Flocationshttps://developers.facebook.com/docs/reference/fql/location_post/ -
7/25/2019 Salucci Simone Tesi
43/58
'o8%es T&e 'o8%es l%ste! o t&e (ser0s pro#%le$ user_likes or
friends_likes$
'(s%) T&e '(s%) l%ste! o t&e (ser0s pro#%le$ user_likes or
friends_likes$
'(t(al#r%e!s T&e '(t(al #r%e!s 7et1ee t1o (sers$A 8al%!access_token o# t&e)(rret sess%o (ser$
otes T&e (ser0s otes$ user_notes$
ot%#%)at%os App ot%#%)at%os #or t&e (ser$
A 8al%!
access_token o# t&e)(rret sess%o (ser$
o(t7o T&e 'essa/es % t&%s (ser0s o(t7o$ read_mailbo#$
pa'etsT&e Fa)e7oo2 Cre!%ts or!ers t&e (ser pla)e!1%t& a appl%)at%o$ See t&e Cre!%ts Ap% #or'ore %#or'at%o$
app access_token
per'%ss%osT&e per'%ss%os t&at (ser &as /rate! t&eappl%)at%o$
Noe$
p&otos "&otos t&e (ser or #r%e! %s ta//e! %$user_photo_video_tags orfriends_photo_vid
eo_tags$
"&otos(ploa!e!All o# t&e (p!ates p&otos o# a (ser$ C(rsor
7ase! pa/%at%o$ user_photos
p%)t(re T&e (ser0s pro#%le p%)t(re$No access_tokenre>(%re!$
po2es T&e (ser0s po2es$ read_mailbo#$
posts T&e (ser0s o1 posts$
A 8al%!access_token orread_stream to seeo-p(7l%) posts$
>(est%os T&e (ser0s >(est%os$ user_questions
s)ores T&e )(rret s)ores #or t&e (ser % /a'es$ user_games_activity orfriends_games_act
4
https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmovieshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmusichttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmutualfriends%2F1207059https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fnoteshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Foutboxhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpermissionshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fphotoshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpokeshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpostshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmovieshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmusichttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmutualfriends%2F1207059https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fnoteshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Foutboxhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpermissionshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fphotoshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpokeshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpostshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/ -
7/25/2019 Salucci Simone Tesi
44/58
ivity$
s&are!posts Ret(rs s&ares o# t&e o7[e)t$ C(rsor 7ase!pa/%at%o$
read_stream
stat(ses T&e (ser0s stat(s (p!ates$ read_stream$
s(7s)r%7e!to "eople o(0re s(7s)r%7e! to$ A 8al%!access_token
s(7s)r%7ers T&e (ser0s s(7s)r%7ers$ A 8al%!access_token
ta//e! "osts t&e (ser %s ta//e! %$ read_stream
tele8%s%o T&e tele8%s%o l%ste! o t&e (ser0s pro#%le$ user_likes or
friends_likes$
(p!ates T&e (p!ates % t&%s (ser0s %7o$ read_mailbo#$
8%!eos T&e 8%!eos t&%s (ser &as 7ee ta//e! %$ user_videos or
friends_videos$
Noostate >(este (o8e l%'%ta,%o% la 'a//%or parte !elle %#or'a,%o% sooa)ora reper%7%l% se,a al)( pro7le'a: s(##%)%ete %#att% r%)&%e!ere /l%
appost% to2e !e% !at% )&e %teressao a! ese'p%o per otteere le !ate !%
as)%ta !e/l% a'%)% 7aster r%)&%e!ere %l to2e ;#r%e!s7%rt&!a< e otterre'o
>(est% !at% se,a al)( pro7le'a$
Co po)&e r%/&e !% )o!%)e (t%l%,,a!o le (o8e ;Grap& A"I< poss%7%le
otteere le se/(et% %#or'a,%o% s(/l% a'%)%:
\Q%!Q: Q*5555334694496Q?Qa'eQ: QTo Ma,,%%Q?Q#%rsta'eQ: QToQ?Qlasta'eQ: QMa,,%%Q?Ql%2Q: Q&ttp:111$#a)e7oo2$)o'to$'a,,%%$9+Q?Q(sera'eQ: Qto$'a,,%%$9+Q?Q7%rt&!aQ: Q*+*3*634Q?
https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fsharedpostshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fstatuseshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ftaggedhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ftelevisionhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fupdateshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fvideoshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fsharedpostshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fstatuseshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ftaggedhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ftelevisionhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fupdateshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fvideos -
7/25/2019 Salucci Simone Tesi
45/58
Q&o'eto1Q: \Q%!Q: Q**545+9=9=54Q?
Qa'eQ: QBolo/a? ItalQ]?Qlo)at%oQ: \Q%!Q: Q**545+9=9=54Q?Qa'eQ: QBolo/a? ItalQ
]?Q7%oQ: QUtete !% pro8aQ?Q>(otesQ: QC%ta,%oe !% pro8aQ?Q1or2Q: \
Qe'ploerQ: \
Q%!Q: Q*+539*6.*4+=5+Q?Qa'eQ: Qp%,,er%a ^Q!a '%''o^QQ
]?Qstart!ateQ: Q5555-55Q?Qe!!ateQ: Q5555-55Q
]?Qe!()at%oQ: \
Qs)&oolQ: \Q%!Q: Q*6=*3=.+*49+9Q?Qa'eQ: QL%)eo s)%et%#%)o ^QEr%)o Fer'%^Q Bolo/aQ
]?QearQ: \Q%!Q: Q4+9.==++**35Q?Qa'eQ: Q+555Q
]?QtpeQ: QH%/& S)&oolQ
]?\
Qs)&oolQ: \
Q%!Q: Q*5+*34+.4*9=695Q?Qa'eQ: QU%8ers%t o# Bolo/aQ]?QearQ: \Q%!Q: Q*+56=59=*4.94*+Q?Qa'eQ: Q+5*4Q
]?QtpeQ: QColle/eQ
]?
9
-
7/25/2019 Salucci Simone Tesi
46/58
Q/e!erQ: Q'aleQ?Qrelat%os&%pstat(sQ: QS%/leQ?
Qrel%/%oQ: QB(!!%staQ?Qpol%t%)alQ: QAar)&Q?Qlo)aleQ: Q%tITQ?Qla/(a/esQ: \
Q%!Q: Q*=+6456+.56=+**Q?Qa'eQ: QOl! Spa%s&Q
]?]
L0(%)o 8ero pro7le'a !ato !al )a'po ;e'a%l(este (o8e
A"I 8e!%a'o %#att% )&e s)r%tto espl%)%ta'ete ;A (ser0s e'a%l %s a prote)te!
propert a! a))ess to t&at %#or'at%o '(st 7e spe)%#%)all re>(este! 7 t&e
app a! /rate! 7 t&e (ser
-
7/25/2019 Salucci Simone Tesi
47/58
Sele,%oa!o l0%)oa !% Fa)e7oo2 )% 8err )&%esto !% lo//ar)% )o le ostre)re!e,%al% e? (a 8olta !ato %l per'esso a a&oo !% a))e!ere alle %#or'a,%o%
!e% ostr% )otatt%? a8re'o !%spo%7%le la l%sta !% t(tt% % ostr% ;a'%)%< )o le
r%spett%8e e-'a%l$
"( Il 3%ocial p)i%)in#4
"("1 3P)i%)in#4 e 3%pear p)i%)in#4
Il ;"&%s&%/< ( tetat%8o !% a)>(%s%re %#or'a,%o% r%ser8ate )o'e
(sera'e? pass1or! e ('er% !% )arta !% )re!%to? #%/e!os% (0et%t #%!ata %
(a )o'(%)a,%oe elettro%)a$Il pro)esso sta!ar! !elle 'eto!olo/%e !% atta))o !% p&%s&%/ p( r%ass('ers%
elle se/(et% #as%**:
*$ L0(tete 'al%te,%oato phisher spe!%s)e al 'al)ap%tato e %/aro (tete
( 'essa//%o e'a%l )&e s%'(la? ella /ra#%)a e el )ote(to? >(ello !% (a
%st%t(,%oe ota al !est%atar%o per ese'p%o la s(a 7a)a? %l s(o pro8%!er 1e7?
.
Figura $.2.2: Scher(ata contatti i(portati con rispettivi inirizzi e,(ail
-
7/25/2019 Salucci Simone Tesi
48/58
( s%to !% aste ol%e a )(% %s)r%tto$
+$ L0e-'a%l )ot%ee >(as% se'pre a88%s% !%particolari situazioni o proble(i8er%#%)ates% )o %l propr%o )oto )orretea))o(t a! ese'p%o ( a!!e7%to
eor'e? la s)a!e,a !ell0a))o(t? e))$ opp(re (0o##erta !% !earo$
4$ L0e-'a%l %8%ta %l !est%atar%o a se/(%re ( l%2? presete el 'essa//%o? per
e8%tare l0a!!e7%to eo per re/olar%,,are la s(a pos%,%oe )o l0ete o la so)%et
!% )(% %l 'essa//%o s%'(la la /ra#%)a e l0%'posta,%oe Fa2e lo/%$
$Il l%2 #or%to? t(tta8%a? nonporta % realt al s%to 1e7 (##%)%ale? 'a a (a
copia fittizia apparete'ete s%'%le al s%to (##%)%ale? s%t(ata s( ( ser8er
)otrollato !al p&%s&er? allo s)opo !% r%)&%e!ere e otteere !al !est%atar%o !at%
persoal% part%)olar%? or'al'ete )o la s)(sa !% (a )o#er'a o la e)ess%t
!% e##ett(are (a a(tet%)a,%oe al s%ste'aJ >(este %#or'a,%o% 8e/oo
'e'or%,,ate !al ser8er /est%to !al p&%s&er e >(%!% #%%s)oo elle 'a% !el
'al%te,%oato$
9$ Il p&%s&er (t%l%,,a >(est% !at% per a)>(%stare 7e%? tras#er%re so''e !% !earo
o a)&e solo )o'e QpoteQ per (lter%or% atta))&%$
3
Figura $.3.1.1: -se(pio i e(ail phishing
-
7/25/2019 Salucci Simone Tesi
49/58
Gl% atta))&% !% >(esto t%po o &ao % /eere alte pro7a7%l%t !% s())esso
!all0* al 4 a )a(sa !el #atto )&e spesso >(este e'a%l !% p&%s&%/ soo s)r%tte
)o tra!(ttor% a(to'at%)%? per )(% soo preset% error% 'a sopratt(tto per)& /l%
(tet% a% >(al% 8e/oo o##erte so''e !% !earo s(l )oto )orrete o o##erte
troppo 8ata//%ose te!oo a o #%!ars%J % 7ro1ser? %oltre? &ao !e% s%ste'%
!% s%)(re,,a )&e soo % /ra!o !% r%)oos)ere e 7lo))are 'olte pa/%e !%
p&%s&%/ e )otr%7(%s)oo )os a teere 7assa >(esta per)et(ale$
Es%ste a)&e (a te)%)a part%)olare !% p&%s&%/? )&%a'ata ;spear p&%s&%/
-
7/25/2019 Salucci Simone Tesi
50/58
e )o l0a88eto !e% so)%al et1or2? reper%re >(este %#or'a,%o% !%8etato
a)ora p%@ #a)%le$
"("2 Social p)i%)in#
;So)%al "&%s&%/(esta r%)er)a )ap%re >(ato #a)%l'ete p( ( p&%s&er ser8%rs% !e%
!at% !e% so)%al et1or2 per %)re'etare %l re!%'eto !el propr%o atta))o$
I >(esto st(!%o soo stat% se'pl%)e'ete a)>(%s%t% !at% !a 8ar% so)%al et1or2
e! stato #a)%l'ete e 8elo)e'ete )reato ( !ata7ase )o !e)%e !% '%/l%a%a
!% rela,%o% (sa!o )ra1l%/ e pars%/ tools )o'e le ;"erl L" l%7rar
-
7/25/2019 Salucci Simone Tesi
51/58
"("( Il no.o al#oritmo di attacco
Data la per)et(ale !% s())esso !el t%po !% atta))o appea !es)r%tto s% potre77e
pesare !% ott%'%,,are l0al/or%t'o s#r(tta!o >(esta te)%)a$
Ua 8olta ter'%ata la pr%'a #ase !ell0atta))o? % )(% 8e/oo testate le 3
pass1or!? s% pro)e!e )o l0al/or%t'o or'ale )o /l% (tet% !% )(% s% soo
s)operte le pass1or!? 'etre per %l resto !e/l% (tet%? s% potre77ero (t%l%,,are %
!at% ra))olt% % pre)e!e,a el !ata7ase per )reare 'essa//% persoal%,,at% %
)(% /l% (tet% 8e/oo %8%tat% a )l%))are s( ( !eter'%ato l%2 )&e )oette
l0(tete %/aro a (a #%ta pa/%a !% lo/% !% Fa)e7oo2 ella >(ale se la 8%tt%'a
%ser%s)e % propr% !at% >(est% 8e/oo %8%at% all0atta))ate e alla 8%tt%'a
)o'pare ( 'essa//%o % )(% s% )o'(%)a )&e le )re!e,%al% %ser%te soo
errate 8ee!o po% re%!%r%,,ato alla 8era pa/%a !% Fa)e7oo2 per )er)are !%
9*
Figura $.3.2.1: Sche(a attacco )Social Phishing)
-
7/25/2019 Salucci Simone Tesi
52/58
o )reare sospett%$
Se)o!o % !at% !ella r%)er)a s% potre77e atta))are )o s())esso (a per)et(ale'olto ele8ata !% (tet%? ella ta7ella poss%7%le osser8are )o'e el /%ro !%
po)&e %tera,%o% !ell0al/or%t'o %l ('ero !% (tet% )olp%t% r%s(ltere77e 'olto
alto$
Utenti 5 Pa%%&ord tro.ate Amici 6otale per%one
65 .+ =.= *45 3.355
.495 .+ 9+6+ *45 =3.6=5
9=55 .+ 5=53 *45 9+.655.5555 .+ 44355 *45 466+555
4.95555 .+ +.55555 *45 49*555555
45555555 .+ +*=55555 *45 +353555555
A >(este ;(o8e< 8%tt%'e s% potre77e po% s#errare !% (o8o ( atta))o !el
9+
Figura $.3.3.1: ese(pio sito phishing i Facebook
-
7/25/2019 Salucci Simone Tesi
53/58
pr%'o t%po e a% ;s(perst%t%< r%pro8are )o la te)%)a !% ;so)%al p&%s&%/(est%oe$ Se % !at% %pot%,,at% tro8assero r%s)otro a)&e % ( test reale s%
arr%8ere77e a! atta))are ( ('ero alt%ss%'o !% (tet% el /%ro !% po)&e
%tera,%o% !ell0al/or%t'o$
Figura $.3.3.2: sche(a nuovo algorit(o i attacco
94
Sal8are t(tte le %#or'a,%o% !e/l% a'%)%
I!%8%!(are le pass1or! (t%l%,,a!o le %#or'a,%oera))olte
"er o/% pass1or! %!%8%!(ata )oetters%all0a))o(t
"er /l% (tet% !% )(% o s% %!%8%!(ata la pass1or!tetare )o %l so)%al p&%s&%/
"er o/% pass1or! 8%olata )oetters%all0a))o(t
-
7/25/2019 Salucci Simone Tesi
54/58
9
-
7/25/2019 Salucci Simone Tesi
55/58
Capitolo 7
Concl%ioni
Lo s)opo !% >(esta tes% 8al(tare l0e##%)%e,a !el t%po !% atta))o presetato
ella tes% ;L0** sette'7re tele'at%)o< !% A!rea V%tal%$
Nel +5*5 era stata pro8ata (a 8%ola,%oe totale !el * !e/l% (tet% atta))at%J
alla l()e !e% (o8% !at% s(lla s%)(re,,a !elle pass1or! (t%l%,,ate !a/l% (tet%?
>(esto !ato r%s(lta )o#er'ato a)&e a! %%,%o +5*4$
E0 stato r%s)otrato ( pro7le'a )&e potre77e re!ere %(t%l%,,a7%le >(esta
te)%)a !% atta))o % >(ato !al +5*5 a! o//% le pol%t%)&e s(lla pr%8a) !%
Fa)e7oo2 soo state )a'7%ate e l0e'a%l !e/l% a'%)% o p%@ ( !ato
a))ess%7%le? t(tta8%a /ra,%e a ( ser8%,%o !% a&oo a)ora poss%7%le r%sal%re
a/l% %!%r%,,% !% posta elettro%)a !e% )otatt%$
Co'e (lt%'o p(to stata presetata (a te)%)a )&e potre77e portare a
'%/l%orare ote8ol'ete la per)et(ale !% s())esso !ell0al/or%t'o: (t%l%,,a!o
(a te)%)a part%)olare !% p&%s&%/? )&e s% a88ale !elle %#or'a,%o% ra))olte %
%teret e s(% so)%al et1or2 r%/(ar!o a/l% (tet% e le loro rela,%o%? s% potre77e
)os arr%8are a! otteere le )re!e,%al% !% a))esso !el .+ !e/l% (tet%$
(esto !ato part%)olar'ete %teressate per)& tale per)et(ale !% s())essos%/%#%)&ere77e poter a8ere %l )otrollo totale !% >(as% 4 (tet% s( >(attro? (a
per)et(ale alt%ss%'a$
S% tratta >(%!% !% poter ese/(%re trasa,%o% o-l%e? 8%s(al%,,are % )ot%
7a)ar% e % loro 'o8%'et%? % !etta/l% !elle )&%a'ate? % ('er% !% )arte !%
)re!%to e (0%#%%t !% !at% persoal%$
99
-
7/25/2019 Salucci Simone Tesi
56/58
S% p( >(%!% )o)l(!ere )&e a)ora o//% s%a poss%7%le s#errare ( atta))o
s#r(tta!o la te)%)a aal%,,ata e )&e tale te)%)a potre77e essere '%/l%orata ee resa p%@ e##%)a)e arr%8a!o a per)et(al% !% s())esso a)ora p%@ ele8ate?
'ette!o % ser%o per%)olo ( ('ero alt%ss%'o !% (tet%$
7"1 S.ilppi +tri
I >(esto la8oro o stato poss%7%le tro8are ( 'o!o 8al%!o !% %'ple'etare
s)r%pt per 7passare %l pro7le'a !e/l% %!%r%,,% e'a%l o p%@ 8%s(al%,,a7%l% )o
le A"I !% Fa)e7oo2? 7%so/ere77e testare se e##ett%8a'ete s%a poss%7%le
)rearlo per poter s#errare )os >(esto t%po !% atta))o$
Sare77e %oltre %teressate pro8are a! ese/(%re test s( ( )a'p%oe reale e
a77asta,a s%/%#%)at%8o !% persoe per 8er%#%)are se? attra8erso la te)%)a !el
;So)%al p&%s&%/
-
7/25/2019 Salucci Simone Tesi
57/58
Bi-lio#ra+ia
* A!rea V%tal%$ L0** sette'7re tele'at%)o$ R%s)&% !% s%)(re,,a )a(sat% !a%
so)%al et1or2$ Master0s t&es%s? Al'a Mater St(!%or('- U%8ers%t !%
Bolo/a? +556+5*5$
+ A!rea V%tal%? V%ttor%o G&%%? Fa7%o "a,%er%$ E-apo)alpse o1: t&e
Mass%8e M(lt%-a Atta)2$
4 A!ele E$Ho8e? I!ra[%t Ra? Mar2 Ro7erts? Mal/or,ata Ur7as2a? Z%ta
Bre$ T&e "s)&olo/ o# Se)(r%t #or t&e Ho'e Co'p(ter User$ +5*+ IEEE
S'pos%(' o Se)(r%t a! "r%8a)$
To' N$ _a/at%)? Nat&a%el A$ [o&so? Mar2(s _a2o7sso? F%l%ppo
Me),er$ SOCIAL "HISHING$ Co'(%)at%o o# t&e A)'? O)to7er +55.? 8ol$95? o$ *5$
9 _osep& Boea(? Co'p(ter La7orator? U%8ers%t o# Ca'7r%!/e$ T&e
s)%e)e o# /(ess%/: aal,%/ a ao'%,e! )orp(s o# .5 '%ll%o pass1or!$
= Me!%as)ope E(rope$ "a-E(ropea La()& "resetat%o S(''ar$ Ma
+5*+
.So)%alBa2ers$ URL:&ttp:111$so)%al7a2ers$)o'#a)e7oo2-stat%st%)s
3Splas&!ata$ orst "ass1or! o# +5*+ P a! Ho1 to F% T&e'$
URL:&ttp:splas&!ata$)o'press"R*+*5+4$&t'
9.
http://www.socialbakers.com/facebook-statistics/http://splashdata.com/press/PR121023.htmhttp://www.socialbakers.com/facebook-statistics/http://splashdata.com/press/PR121023.htm -
7/25/2019 Salucci Simone Tesi
58/58
6 Mart% M$A$ De8%llers$ Aal,%/ "ass1or! Stre/t&$ _(l +5*5$
*5Fa)e7oo2De8elopers
URL:&ttps:!e8elopers$#a)e7oo2$)o'!o)sre#ere)eap%
URL:&ttps:!e8elopers$#a)e7oo2$)o'!o)sre#ere)eap%(ser
**"&%s&%/$ %2%pe!%a$ URL:&ttp:%t$1%2%pe!%a$or/1%2%"&%s&%/
https://developers.facebook.com/docs/reference/api/https://developers.facebook.com/docs/reference/api/user/http://it.wikipedia.org/wiki/Phishinghttps://developers.facebook.com/docs/reference/api/https://developers.facebook.com/docs/reference/api/user/http://it.wikipedia.org/wiki/Phishing