Personal information leakage during password recovery of internet services

Mordechai Guri; Eyal Shemer; Dov Shirtz; Yuval Elovici

doi:https://doi.org/10.1109/EISIC.2016.035

Personal information leakage during password recovery of internet services

Mordechai Guri, Eyal Shemer, Dov Shirtz, Yuval Elovici

Department of Software and Information Systems Engineering

Ben-Gurion University of the Negev

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

In this paper we examine the standard password recovery process of large Internet services such as Gmail, Facebook, and Twitter. Although most of these services try to maintain user privacy, with regard to registration information and other personal information provided by the user, we demonstrate that personal information can still be obtained by unauthorized individuals or attackers. This information includes the full (or partial) email address, phone number, friends list, address, etc. We examine different scenarios and demonstrate how the details revealed in the password recovery process can be used to deduct more focused information about users.

Original language	American English
Title of host publication	Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016
Editors	Joel Brynielsson, Fredrik Johansson
Pages	136-139
Number of pages	4
ISBN (Electronic)	9781509028566
DOIs	https://doi.org/10.1109/EISIC.2016.035
State	Published - 2 Mar 2017
Event	7th European Intelligence and Security Informatics Conference, EISIC 2016 - Uppsala, Sweden Duration: 17 Aug 2016 → 19 Aug 2016

Publication series

Name	Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016

Conference

Conference	7th European Intelligence and Security Informatics Conference, EISIC 2016
Country/Territory	Sweden
City	Uppsala
Period	17/08/16 → 19/08/16

Keywords

Information leakage
Password recovery
Personal information
Privacy
Security internet services

All Science Journal Classification (ASJC) codes

Computer Networks and Communications
Information Systems
Safety Research
Communication
Safety, Risk, Reliability and Quality

Access to Document

https://doi.org/10.1109/EISIC.2016.035

Cite this

Guri, M., Shemer, E., Shirtz, D., & Elovici, Y. (2017). Personal information leakage during password recovery of internet services. In J. Brynielsson, & F. Johansson (Eds.), Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016 (pp. 136-139). Article 7870208 (Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016). https://doi.org/10.1109/EISIC.2016.035

Guri, Mordechai ; Shemer, Eyal ; Shirtz, Dov et al. / Personal information leakage during password recovery of internet services. Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016. editor / Joel Brynielsson ; Fredrik Johansson. 2017. pp. 136-139 (Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016).

@inproceedings{df540c90381241f0a5722f905862011c,

title = "Personal information leakage during password recovery of internet services",

abstract = "In this paper we examine the standard password recovery process of large Internet services such as Gmail, Facebook, and Twitter. Although most of these services try to maintain user privacy, with regard to registration information and other personal information provided by the user, we demonstrate that personal information can still be obtained by unauthorized individuals or attackers. This information includes the full (or partial) email address, phone number, friends list, address, etc. We examine different scenarios and demonstrate how the details revealed in the password recovery process can be used to deduct more focused information about users.",

keywords = "Information leakage, Password recovery, Personal information, Privacy, Security internet services",

author = "Mordechai Guri and Eyal Shemer and Dov Shirtz and Yuval Elovici",

note = "Publisher Copyright: {\textcopyright} 2016 IEEE.; 7th European Intelligence and Security Informatics Conference, EISIC 2016 ; Conference date: 17-08-2016 Through 19-08-2016",

year = "2017",

month = mar,

day = "2",

doi = "https://doi.org/10.1109/EISIC.2016.035",

language = "American English",

series = "Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016",

pages = "136--139",

editor = "Joel Brynielsson and Fredrik Johansson",

booktitle = "Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016",

}

Guri, M, Shemer, E, Shirtz, D & Elovici, Y 2017, Personal information leakage during password recovery of internet services. in J Brynielsson & F Johansson (eds), Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016., 7870208, Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016, pp. 136-139, 7th European Intelligence and Security Informatics Conference, EISIC 2016, Uppsala, Sweden, 17/08/16. https://doi.org/10.1109/EISIC.2016.035

Personal information leakage during password recovery of internet services. / Guri, Mordechai; Shemer, Eyal; Shirtz, Dov et al.
Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016. ed. / Joel Brynielsson; Fredrik Johansson. 2017. p. 136-139 7870208 (Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Personal information leakage during password recovery of internet services

AU - Guri, Mordechai

AU - Shemer, Eyal

AU - Shirtz, Dov

AU - Elovici, Yuval

PY - 2017/3/2

Y1 - 2017/3/2

N2 - In this paper we examine the standard password recovery process of large Internet services such as Gmail, Facebook, and Twitter. Although most of these services try to maintain user privacy, with regard to registration information and other personal information provided by the user, we demonstrate that personal information can still be obtained by unauthorized individuals or attackers. This information includes the full (or partial) email address, phone number, friends list, address, etc. We examine different scenarios and demonstrate how the details revealed in the password recovery process can be used to deduct more focused information about users.

AB - In this paper we examine the standard password recovery process of large Internet services such as Gmail, Facebook, and Twitter. Although most of these services try to maintain user privacy, with regard to registration information and other personal information provided by the user, we demonstrate that personal information can still be obtained by unauthorized individuals or attackers. This information includes the full (or partial) email address, phone number, friends list, address, etc. We examine different scenarios and demonstrate how the details revealed in the password recovery process can be used to deduct more focused information about users.

KW - Information leakage

KW - Password recovery

KW - Personal information

KW - Privacy

KW - Security internet services

UR - http://www.scopus.com/inward/record.url?scp=85017199652&partnerID=8YFLogxK

U2 - https://doi.org/10.1109/EISIC.2016.035

DO - https://doi.org/10.1109/EISIC.2016.035

M3 - Conference contribution

T3 - Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016

SP - 136

EP - 139

BT - Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016

A2 - Brynielsson, Joel

A2 - Johansson, Fredrik

T2 - 7th European Intelligence and Security Informatics Conference, EISIC 2016

Y2 - 17 August 2016 through 19 August 2016

ER -

Guri M, Shemer E, Shirtz D, Elovici Y. Personal information leakage during password recovery of internet services. In Brynielsson J, Johansson F, editors, Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016. 2017. p. 136-139. 7870208. (Proceedings - 2016 European Intelligence and Security Informatics Conference, EISIC 2016). doi: https://doi.org/10.1109/EISIC.2016.035

Personal information leakage during password recovery of internet services

Abstract

Publication series

Conference

Keywords

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this