 display of all past [*chameleon* ]{}posts.

During (5) *delivery* and (6) the second *maturation* phase, the refreshed [*chameleon* ]{}profiles (avatars) contact the target and build trust with it. The (7) *execution* phase in this misuse case depends on the attacker’s goals. The avatars that already engaged in an attack will likely be discarded.

#### Potential Impact

The adversary does not have to create an OSN account and build an appropriate agenda for each avatar long before executing an attack. *Chameleon* profiles and posts are created and maintained as a general resource suitable for various attack campaigns. As a result, the cost of maintaining such avatars is dramatically reduced. Moreover, if an avatar is detected and blocked during the attack campaign, its replacement can be *weaponized* and released very quickly.

### Evading Censorship

OSNs maintain millions of entities, such as pages, groups, communities, etc. For example, Facebook groups unite users based on shared interests [@casteleyn2009use]. To ensure proper language, avoid trolling and abuse, or allow in only users with a very specific agenda, moderators inspect the users who ask to join the groups and review the published posts. *Chameleon* attack can help in evading censorship, as well as a shallow screening of OSN profiles. See Section \[sec:mitigation\] for specific recommendations on profile screening to detect [*chameleon* ]{}profiles.

For example, assume two Facebook groups, uniting Democrat and Republican activists during U.S. elections. Assume a dishonest activist from one political extreme that would like to join a Facebook group of the rivals. Reasons may vary from trolling to spying. Assume, that this activist would like to spread propaganda within the rival group. But pages that exhibit an agenda that is not appropriate for the group would not be allowed by the group owner. The next procedure would allow the rival activist to bypass the censorship of the group moderator.

#### Execution Flow

During the (1) *reconnaissance* phase, the adversary learns the censorship rules of the target. (2) The *weaponizing* phase includes establishing a [*chameleon* ]{}profile with agenda appropriate to the censorship. During the (3) *maturation* phase, the adversary publ
display of all past [ * chameleon * ] { } posts. 

 During (5) * delivery * and (6) the second * growth * phase, the freshen [ * chameleon * ] { } profiles (avatars) touch the target and build reliance with it. The (7) * execution * phase in this misuse case depend on the attacker ’s goals. The avatars that already hire in an attack will likely be discarded. 

 # # # # Potential Impact 

 The adversary does not have to create an OSN account and construct an appropriate agenda for each avatar long before executing an attack. * chamaeleon * profiles and posts are create and maintained as a cosmopolitan resource suitable for versatile attack campaigns. As a result, the monetary value of maintaining such avatars is dramatically reduced. Moreover, if an avatar is detected and blocked during the attack campaign, its replacement can be * weaponized * and released very quickly. 

 # # # Evading Censorship 

 OSNs maintain millions of entity, such as page, groups, community, etc. For exercise, Facebook groups unite drug user based on shared interests   [ @casteleyn2009use ]. To ensure proper linguistic process, avoid trolling and abuse, or allow in only users with a very specific agenda, moderator inspect the users who ask to join the group and review the published position. * chamaeleon * attack can help in evading censorship, as well as a shallow screening of OSN profiles. See incision   \[sec: mitigation\ ] for specific recommendations on profile screening to detect [ * chameleon * ] { } visibility. 

 For example, simulate two Facebook groups, uniting Democrat and Republican militant during U.S. elections. Assume a dishonest activist from one political extreme point that would like to join a Facebook group of the rival. Reasons may vary from trolling to spying. Assume, that this activist would wish to spread propaganda within the rival group. But pages that exhibit an agenda that is not appropriate for the group would not be allow by the group owner. The next procedure would allow the rival activist to bypass the censorship of the group moderator. 

 # # # # performance Flow 

 During the (1) * reconnaissance * phase, the adversary learns the censoring rules of the target. (2) The * weaponizing * phase admit establishing a [ * chameleon * ] { } profile with agenda appropriate to the censoring. During the (3) * maturation * phase, the adversary publ
 didplay of all past [*chamelton* ]{}posts.

During (5) *bwliverb* and (6) fhe secovd *maturation* phase, the refrxshee [*chaneleon* ]{}profiles (avatarr) contact the tartet end build trust xjth it. Bke (7) *esccutimi* phase in this misuse cave depends on dhd cttacker’s goals. The avatars that alrqady enbahed in an attask wplj liivln be discarded.

#### Potential Impact

Tge advegsary does not hafe to create an OSN accounh anf build an approprlate agenda for wach avatar uong befort zxecuting ah attack. *Chameleon* profiles and postx are creajze ajg maintainev as a general resource suhtable gor various atback rampqigns. As a result, the cost of maintainigg such aeacars is dramatically eeeuced. Moraovef, if an atatzr is fetxcted and bmocked duribg the attack campaogg, its replacemsnt cag fe *weaponized* and released very quickly.

### Evzding Censorship

OSNs mauntain millions of enjities, sucr as pages, groups, communities, etc. For example, Facabook erobif ynlte users based on shared interests [@casteleyn2009ufs]. Uo vnsure proper lannuage, avoid trollimg amq abuse, or aluow in onmy users with a vegy specyfic qgenda, moqerayors inspect the users who qsk to join nhe troups and review che publisheb postx. *Chakeleon* attack can help nn evasing censordhip, as wsul as a shallow rcrvenitg of OSN profiles. See Seceion \[sec:mivigatnon\] for rpecofic rqcommendatlons on profile screeninh to betecd [*chameleoj* ]{}profiles.

For example, assume two Facebook groops, unpting Demjcrat and Republicwn activists doring U.S. zlectiuns. Assume a dishmnest activyst from one [llitical extceme that wouod luke to guin a Facebook group of the rivalw. Reasons may vary fruj trolling to s'vibg. Assume, that yhir astpvixt fould like tm spfeaa propxganda withln ghe tival group. But pagev thzt exhibit an agenca that is not appwopriate for yhe group would nou be anloxed by thg group owner. The next procedurs would aplor the rival wctiyist to bypass the censorship of the group moderator.

#### Xxecution Flow

During thw (1) *reconnaissance* pkaxe, the advecsary jearns tha censorship rules od the target. (2) The *weaponizing* phase indludes estahlishing a [*chameleon* ]{}profile with agenda appropriate to the censorship. Dueing tie (3) *maturatioh* phsse, tve cdversawy pnbu
display of all past [*chameleon* ]{}posts. During and the second phase, the refreshed target build trust with The (7) *execution* in this misuse case depends on attacker’s goals. The avatars that already engaged in an attack will likely be #### Potential Impact The adversary does not have to create an OSN account build appropriate for avatar long before executing an attack. *Chameleon* profiles and posts are created and maintained as a resource suitable for various attack campaigns. As a the cost of maintaining avatars is dramatically reduced. Moreover, an is detected blocked the campaign, its replacement be *weaponized* and released very quickly. ### Evading Censorship OSNs maintain millions of entities, such as pages, communities, etc. Facebook groups users on interests [@casteleyn2009use]. To language, avoid trolling and abuse, or users with a very specific agenda, moderators inspect users who to join the groups and review published posts. *Chameleon* attack can help in evading as well as a shallow screening of OSN profiles. See Section \[sec:mitigation\] for specific recommendations screening to detect [*chameleon* For example, assume Facebook uniting and activists during elections. Assume a dishonest activist from one political extreme that would to join a Facebook group of the rivals. Reasons may trolling spying. Assume, that activist would like to propaganda the rival group. But exhibit agenda appropriate the would not be allowed the group owner. The next would allow the rival of the group moderator. #### Execution Flow During (1) *reconnaissance* phase, the adversary learns the rules of the target. (2) The *weaponizing* phase includes establishing a [*chameleon* with agenda the censorship. During the (3) *maturation* phase, the publ
 display of all past [*chameleon* ]{}Posts.

DurinG (5) *deliVerY* anD (6) tHe seCond *Maturation* phasE, The rEfreshed [*chameleon* ]{}profiLes (avAtARs) coNTaCt the Target aND bUILd tRuSt WitH iT. thE (7) *execUtiOn* phase In this misuSe cAsE depends on thE AtTacker’s goaLs. THe avatars thaT alReady eNgAgeD In an aTtaCk wilL likelY Be discArded.

#### PoteNtIAl ImpaCT

The advERSaRy doEs not have to create AN Osn account and buiLd an apPrOPrIATe aGenDa for each aVaTar loNG before EXeCUTIng AN attack. *ChamelEon* profiles ANd pOsts arE cReaTEd and mAintaInED as A general resOurcE suitable For varIOus attaCK campaiGns. As a ResUlt, The cOSt Of MaiNtAIniNG sUch AVatArs is draMaTiCally ReduCED. mOreoVer, If an AvataR is detected anD blOckeD DurIng thE attaCk caMpAign, iTs replAcemeNt Can be *weaponized* And rEleased veRy qUiCklY.

### EVadinG censorShiP

OSns maintAin millIOns Of ENTItIes, such as pages, grouPs, COMmUnities, eTc. For eXAmPlE, facebook GrOupS uniTE Users BaseD On Shared inTerestS [@CaStEleyn2009usE]. TO ensurE pRopEr lAnguaGE, avoId trolLing and aBuse, oR Allow in only useRS with a very speCIfIC AgENda, mOdeRators inspeCt thE UserS who ASk To jOIn the GroupS aND rEView the published posTs. *chamelEon* atTack can help in Evading cenSORShip, as weLl as A ShALlow screening oF OSN pRofiles. See sEction \[seC:mitiGation\] foR specific RECommendaTioNs oN prOfiLE ScReening to deteCT [*ChamElEon* ]{}profIleS.

For exaMplE, asSumE twO FAcebook grOups, unitInG DEmOcRat And RePUblican aCtIviStS duRing U.s. ElectiOns. AsSume A dIsHOneSt activISt FROm onE pOlIticAl eXtReme tHat wOUld Like to jOin a FacebOok GRoup Of ThE rivals. reasons may varY fRom trollinG tO spYing. AsSUMe, that thIs activist would like to spREad propAgaNda wiThin The rival gRouP. But paGes THat exhIbit an AgendA tHat IS Not apPROpRiaTe For the grouP WOulD not bE aLlowEd by the Group owner. The next pROceDure would alloW thE rivAL AcTivISt TO byPaSS thE CEnsorship of the gRoup moderaToR.

#### exEcution FloW

durInG the (1) *recOnnaissAnce* pHAse, the aDversary lEarns the cEnSorsHIP ruLes of the taRget. (2) The *wEaponizinG* Phase INcLudes EstAblishInG a [*cHamelEon* ]{}proFIle With aGenda aPpRopriaTe to tHe CensorshIp. During the (3) *maturation* phAse, the AdverSarY publ
 display of all past [*cha meleon* ]{ }post s.
Du ri ng ( 5) * delivery* and( 6) t he second *maturation*  phas e, ther ef reshe d [*cha m el e o n*]{ }p rof il e s(avat ars ) conta ct the tar get  a nd build tru s twith it. T he(7) *executi on*  phase  i n t h is mi sus e cas e depe n ds onthe attac ke r ’s goa l s. Thea v at arsthat already enga g ed in an attack w ill li ke l yb e  di sca rded.

### #Poten t ial Imp a ct T hea dversary does  not have t o  cr eate a nOSN accoun t and  b u ild  an appropr iate  agenda f or eac h  avatar long be fore e xec uti ng a n  a tt ack .* Cha m el eon *  pr ofiles a nd  p ostsarec r e a tedand  mai ntain ed as a gener alreso u rce  suit ableforva rious  attac k cam pa igns. As a resu lt,the costofma int ai nings uch av ata rsis dram aticall y  re du c e d .Moreover, if an av at a r  i s detect ed and bl oc k ed durin gthe  att a c k cam paig n ,its repl acemen t  c an  be *we ap onized *and  re lease d  ver y quic kly.

## # Eva d ing Censorship 
OSNs maintai n  m i l li o ns o f e ntities, su ch a s  pag es,g ro ups ,  comm uniti es ,  e t c. For example, Fac eb ook gr oupsunite users b ased on sh a r e d intere sts[ @c a steleyn2009use ]. To  ensure pr o per lang uage,  avoid t rolling a n d  abuse,orall owino n ly  users with a v erysp ecificage nda, mo der ato rsins pe ct the us ers whoas kto  j oin  theg roups an drev ie w t he pu b lished  post s. * Ch am e leo n* atta c kc a n he lp  i n ev adi ng  cens orsh i p,as well  as a sha llo w  scr ee ni ng of O SN profiles.Se e Section\[ sec :mitig a t ion\] fo r specific recommendati o ns on p rof ile s cree ning to d ete ct [*c ham e leon*]{}pro files .
Fo r examp l e ,ass um e two Face b o okgroup s,  uni ting De mocrat and Republi c anactivists dur ing  U.S . el ect i on s . A ss u mea dishonest activ ist from o ne po litical ex t rem ethat wo uld lik e toj oin a F acebook g roup of t he  riv a l s.Reasons ma y vary f rom troll i ng to sp ying.  As sume,th atthisactivi s t w ouldlike t ospread  prop ag anda wit hin the rival group. Bu t page s tha t e xhibit an  ag e nda  that isnotappropriat e f orthe g rou p  woul d no t  b e a l lowed  byt he groupo wn er. T he  next proce d u r e w ouldall o w theriva l activist to byp a ss the censors hipo f  th e g r oupmo derator.

####  Ex ec u t ion Flow 
During the(1) *rec on n aissa nce* p hase,the adv e r sa r y lear ns t hecensorshi p r ul e s of th eta r get. ( 2) T he  *weap onizin g * ph a s e includes estab lishi n g  a [* c ham eleon *]{}prof i le w ith agenda  appropriat e to t he c ensor ship. D ur ing th e ( 3)  *maturati o n* phase,  theadversa ry  pub l
 display_of all_past [*chameleon* ]{}posts.

During (5)_*delivery* and_(6)_the second_*maturation*_phase, the refreshed_[*chameleon* ]{}profiles (avatars)_contact the target and_build trust with_it._The (7) *execution* phase in this misuse case depends on the attacker’s goals. The_avatars_that already_engaged_in_an attack will likely be_discarded.

#### Potential Impact

The adversary does_not have_to create an OSN account and build an_appropriate_agenda for each_avatar long before executing an attack. *Chameleon* profiles and_posts are created and maintained as_a general resource_suitable_for_various attack campaigns. As_a result, the cost of maintaining_such avatars is dramatically reduced. Moreover,_if an avatar is detected and blocked_during the attack campaign, its replacement_can be *weaponized* and released_very quickly.

###_Evading Censorship

OSNs maintain millions of_entities, such as_pages, groups,_communities, etc. For_example, Facebook groups unite users based_on shared interests [@casteleyn2009use]._To ensure proper language, avoid trolling_and_abuse, or allow_in_only_users with_a very specific_agenda,_moderators inspect_the_users who ask to join the_groups_and review the published posts. *Chameleon* attack_can help in evading_censorship,_as well as a_shallow screening of OSN profiles._See Section \[sec:mitigation\] for specific recommendations on_profile screening_to detect_[*chameleon* ]{}profiles.

For example, assume two Facebook groups, uniting Democrat and Republican_activists during U.S. elections. Assume a_dishonest activist from one_political extreme_that_would like to_join_a Facebook_group of the rivals. Reasons may vary_from trolling_to spying. Assume, that this activist_would like to spread_propaganda_within the rival group. But pages_that exhibit an agenda that is_not appropriate for the group_would_not_be allowed by the group_owner. The next procedure would allow_the rival activist_to bypass the censorship of the group_moderator.

####_Execution Flow

During the (1) *reconnaissance* phase,_the_adversary learns the censorship rules of_the_target._(2) The *weaponizing* phase includes_establishing a [*chameleon* ]{}profile with agenda_appropriate to the censorship. During the (3) *maturation* phase,_the adversary publ