个人信息的使用与滥用——政治版.pdf

1、#BHUSA BlackHatEventsUse&Abuse of Personal InformationPolitics Edition#BHUSA BlackHatEventsDr.Alan J.MichaelsNorthrop Grumman Faculty Fellow/Director,NSI Spectrum DominanceJared ByersResearch AssociateChris HenshawResearch Engineer 2Jaden LeonardResearch EngineerMary NerayoResearch Data AnalystEllio

2、tt RheaultResearch Engineer 2Casey HinesProject SpecialistJack KolenbranderMS GraduateChelsy AblesGraphics DesignUse&Abuse TeamChris PhelpsNetwork Security#BHUSA BlackHatEvents202020212022202320242025Predatory JournalsPersonality Emulation2024 U.S.ElectionsPersonal information usage/sharingMailing l

3、ist content analysisProject TimelineRheault,Elliott,Mary Nerayo,Jaden Leonard,Jack Kolenbrander,Christopher Henshaw,Madison Boswell,and Alan J.Michaels.2024.Use and Abuse of Personal Information,Part I:Design of a Scalable OSINT Collection Engine Journal of Cybersecurity and Privacy 4,no.3:572-593.h

4、ttps:/doi.org/10.3390/jcp4030027#BHUSA BlackHatEventsMotivationIn aggregate,the 2024 elections cost$15.9B.32 x 5000 Tons,$100 bills37,606 x$423K homes342,377 x 4-year college educations(state school)159 x F-35WSJ 7/25/2025#BHUSA BlackHatEventsGive me information!Passive OSINTActive OSINTHeres my“ID”

5、NameEmailEtc.Now gimme!ContentTailoredContentOSINT ResearcherInternetPassive vs.Active Open Source Intelligence(OSINT)Responses#BHUSA BlackHatEvents“One-Time”use of Fake IDThird PartyUse&Abuse ServersUseAbuseUnique Attribution to all Incoming ContentPIIContentSharingFake ID#BHUSA BlackHatEventsFake

6、IDs take a few seconds to create,limited only by external APIsCreating Fake IdentitiesKolenbrander,Jack,Ethan Husmann,Christopher Henshaw,Elliott Rheault,Madison Boswell,and Alan J.Michaels.2024.Use&Abuse of Personal Information,Part II:Robust Generation of Fake IDs for Privacy Experimentation Journ