Social Network Post Analysis for Security Question Compromise Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Security questions used for online accounts are often compromised due to publicly shared information on social networks, making it difficult to ascertain suitable questions and answers, and risk exists even if the account holder has not intentionally disclosed them.
Innovation Solution
A system that analyzes social network posts and search engine results to determine if selected security questions and answers have been compromised, allowing users to make informed selections and periodically monitoring for potential breaches.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security questions are used for online account verification, then user authentication is enabled, but the security questions may be compromised through publicly shared information on social networks
Solution Approach 1:
The system performs preliminary checks of social network information and search engine results before allowing a security question to be established. By proactively scanning for compromised information in advance, the system prevents weak security questions from being set, thereby maintaining account security without relying on post-compromise detection.
Solution Approach 2:
The system continuously monitors social networks and search engines for information that could compromise existing security questions. When compromised information is detected, the system provides feedback to alert users and enables them to change their security questions, creating a closed-loop security mechanism that adapts to emerging threats.
2Measurement precision
If comprehensive social network monitoring is performed to check for compromised security information, then security detection accuracy is improved, but system complexity and processing time increase
Solution Approach 1:
The monitoring system is divided into separate modular components: one module scans social networks while another scans search engines, and each handles specific types of information. This segmentation allows the system to achieve comprehensive monitoring without creating an unmanageable monolithic complexity, as each module can be independently optimized and maintained.
Solution Approach 2:
The system uses intermediary processing layers that aggregate and filter information from multiple social networks and search engines before analyzing for security compromises. These intermediaries simplify the complexity by preprocessing data, filtering out irrelevant information, and presenting only potential security risks to the analysis engine.
3Speed
If real-time monitoring of social networks is implemented to detect compromised security questions, then response time to security breaches is reduced, but computational resources and energy consumption increase
Solution Approach 1:
Instead of continuous real-time monitoring, the system performs periodic scans of social networks and search engines at scheduled intervals. This periodic approach maintains relatively fast breach detection capability while significantly reducing computational resource consumption compared to continuous monitoring, as the system can enter low-power states between scan cycles.
Solution Approach 2:
The system dynamically adjusts monitoring parameters such as scan frequency, depth of analysis, and scope of social networks monitored based on risk levels and resource availability. When security risks are low, the system reduces monitoring intensity to conserve resources; when risks increase, it intensifies monitoring, thereby balancing detection speed with resource consumption.
Data Source
AI summary
An approach is provided to secure security questions by checking posts directed at a social network. In the approach, requested post is received from one of the social network users. The content of the requested post is compared to previously established security questions and corresponding security answers, either established by the user or by another user. The requested post is allowed when the comparison reveals that the content does not compromise one of the previously established security questions and corresponding security answers. However, the requested post is rejected if the comparison reveals that the content compromises one of the previously established security questions and corresponding security answers.