Understanding Online Social Network Usage from a Network Perspective

Similar documents
A First Look at Mobile Hand-held Device Traffic

ISP-Aided Neighbor Selection for P2P Systems

Multimedia Streaming. Mike Zink

Annoyed Users: Ads and Ad-Block Usage in the Wild

Peering at Peerings: On the Role of IXP Route Servers

Malicious Activity and Risky Behavior in Residential Networks

FG INET: Intelligent Networks

FG INET: Intelligent Networks

A First Look at QUIC in the Wild

BLINC: Multilevel Traffic Classification in the Dark

Participant Center User s Guide

Application Detection

A First Look at Modern Enterprise Traffic

REACH SCREEN SYSTEMS. System Support Manual. User manual for operating the REACH Announcement Tool, Scheduling Tool, and Touch Screen Systems.

Revisiting router architectures with Zipf

10 Key Things Your VoIP Firewall Should Do. When voice joins applications and data on your network

ARPA-E Energy Innovation Summit. A user guide for the official networking platform

The Power of Prediction: Cloud Bandwidth and Cost Reduction

Web, HTTP and Web Caching

Welcome to the SIGGRAPH online networking tool!

Information Sharing and User Privacy in the Third-party Identity Management Landscape

Advancing the Art of Internet Edge Outage Detection

Ohio Department of Transportation. SMS Update. District Bridge Engineers. Amjad Waheed, PE. Engineering Division Office of Structural Engineering

A Multi-Perspective Analysis of Carrier-Grade NAT Deployment

INTERNET ENGINEERING. HTTP Protocol. Sadegh Aliakbary

Introduction. Can we use Google for networking research?

Analyzing Cacheable Traffic in ISP Access Networks for Micro CDN applications via Content-Centric Networking

Mosaic: Quantifying Privacy Leakage in Mobile Networks

Internet Traffic Classification Using Machine Learning. Tanjila Ahmed Dec 6, 2017

You are Who You Know and How You Behave: Attribute Inference Attacks via Users Social Friends and Behaviors

Network performance through the eyes of customers

Understanding Today s Mobile Device Shopper. Google/Compete, U.S. Mar 2011

Functionality, Challenges and Architecture of Social Networks

Cisco Service Control Online Advertising Solution Guide: Behavioral. Profile Creation Using Traffic Mirroring, Release 4.0.x

2012 Bike MS Online Fundraising Guide

The State of Mobile. EU5 Mobile Media Landscape and Trends. Alistair Hill, Sr. Analyst

Energy profiler and Network analyzer Training Lab manual for

SSFNET TCP Simulation Analysis by tcpanaly

OSN Attack Automated Identity Theft Attacks

TECHNOLOGY AND COMPUTERS TECH IT OUT AND LEARN NEW SKILLS THAT WILL KEEP YOU UP-TO-DATE.

Review of Previous Lecture

facebook a guide to social networking for massage therapists

High-Level Political Forum on Sustainable Development HLPF Shriman Inc, HLPF 2018 Mobile Application Initial Mockup Screens 21-Feb-18

The Internet today. Measuring the Internet: challenges and applications. Politecnico di Torino 7/12/2011. Speaker: Marco Mellia

Aruba Central Guest Access Application

Back-Office Web Traffic on the Internet. IMC 2014 Vancouver, BC, CANADA November 5-7, 2014

On the State of ECN and TCP Options on the Internet

Partitioning Social Networks for Time-dependent Queries

ELEC6910Q Analytics and Systems for Social Media and Big Data Applications Lecture 4. Prof. James She

How to use MySpace and comment on a photo OR send me a message updating me on what s happening over in Perth!

Quick Reference Guide WEBSITE MESSAGING TOOLS ACCESSIBILITY

Lecture 7b: HTTP. Feb. 24, Internet and Intranet Protocols and Applications

Performance and Quality-of-Service Analysis of a Live P2P Video Multicast Session on the Internet

Cookies, sessions and authentication

Introduction to the Internet

Experimental Study of Skype. Skype Peer-to-Peer VoIP System

CMSC 332 Computer Networking Web and FTP

BIDMC Multi-Factor Authentication Enrollment Guide Table of Contents

Automated Traffic Classification and Application Identification using Machine Learning. Sebastian Zander, Thuy Nguyen, Grenville Armitage

Course Syllabus. Course Title. Who should attend? Course Description. PHP ( Level 1 (

Understanding the Share of IPv6 Traffic in a Dual-Stack ISP

A Hybrid Approach for Accurate Application Traffic Identification

Empirical Characterization of P2P Systems

Characterizing Privacy in Online Social Networks

Identifying Traffic Differentiation in Mobile Networks

Threats & Vulnerabilities in Online Social Networks

Security of End User based Cloud Services Sang Young

A Rendezvous-based Paradigm for Analysis of Solicited and Unsolicited Traffic

7 The system should allow administrator to close a user profile. 8 The system shall make the old events invisible to avoid crowded geo scope.

Lecture 9a: Sessions and Cookies

arxiv: v1 [cs.cy] 19 Jun 2018

Pinterest. What is Pinterest?

Network Controller 3500 Quick Start Guide

745: Advanced Database Systems

Sitecore Experience Platform 8.0 Rev: September 13, Sitecore Experience Platform 8.0

Lab 2. All datagrams related to favicon.ico had been ignored. Diagram 1. Diagram 2

Online Strategies for Intra and Inter Provider Service Migration in Virtual Networks

Drupal 7 Template. Page 1 of 27. Site Title. Navigation Tabs. Homepage Slide. Social Media. News article. Events. Links. Contact Information

CSE 124: Networked Services Lecture-17

Experimental Networking Research and Performance Evaluation

User Guide NRC Research Press Journals Published by

!!!!!! Digital Foundations

SEARCHING FOR FRIENDS

Internet Basics. Basic Terms and Concepts. Connecting to the Internet

iapps Social Step by Step Guide to Create Facebook Pages, Twitter accounts, and LinkedIn Accounts

Telkomtelstra Corporate Website Increase a Business Experience through telkomtelstra Website

For information on troubleshooting common issues, see the Technical Support section in the online help.

Concept: Traffic Flow. Prof. Anja Feldmann, Ph.D. Dr. Steve Uhlig

1-1. Switching Networks (Fall 2010) EE 586 Communication and. September Lecture 10

Google Analytics Reference Guide

An In-depth Study of LTE: Effect of Network Protocol and Application Behavior on Performance

liberate, (n): A library for exposing (traffic-classification) rules and avoiding them efficiently

Guide to Yammer For Education Filed. There have been an increase in use of the social network applications in education system

App Configuration: Updating the app after major website changes

MEMBERSHIP & PARTICIPATION

CERTIFICATE. P3 communications GmbH. Am Kraftversorgungsturm 3, D Aachen, Germany. hereby certifies that. Slovak Telekom a.s.

Ning Frequently Asked Questions

Looking Forward: Challenges in Mobile Security. John Mitchell Stanford University

It s Not the Cost, It s the Quality! Ion Stoica Conviva Networks and UC Berkeley

A look at your OneDrive page

Transcription:

Understanding Online Social Network Usage from a Network Perspective Fabian Schneider fabian@net.t-labs.tu-berlin.de Anja Feldmann Balachander Krishnamurthy Walter Willinger Work done while at AT&T Labs Research Technische Universtität Berlin / Deutsche Telekom Laboratories AT&T Labs Research Internet Measurement Conference 2009 Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 1 / 21

Motivation Introduction Motivation >600,000,000 users on Online Social Networks (OSNs)...and the number is still growing Open questions/challenges Which features are popular among OSN users? How much time do users spend interacting with OSNs? Is there a correlation between subsequent interactions? Relevance of OSN usage ISPs: data transport, connectivity OSN providers: develop and operate scalable systems R&D: Identify trends, suggest improvements, and new designs Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 2 / 21

Outline Introduction Outline 1 Approach 2 Session Characteristics 3 Feature Popularity 4 Dynamics within Sessions Sessions Session = Set of interactions of one user Features Feature = Action a user can perform 5 Conclusions Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 3 / 21

Approach General Approach General Approach 1 Reconstruct OSN clickstreams from anonymized packet-level traces Anonymized HTTP header traces from two large ISPs Used Bro 1 to extract HTTP request-response pairs (rr-pairs) 2 Map rr-pairs into sessions Sessions identified via SessionIDs (from HTTP Cookie header) Track logins and logouts Authenticated or offline state Cookies help if login or logout not observed 3 Classify rr-pairs Active (rr-pair resulting from user action) or Indirect (e.g. followup/embedded via HTTP Referer chain) Determine user actions, group into 13 categories 1 www.bro-ids.org Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 4 / 21

Approach OSN Selection OSN Selection OSN Selection criteria: OSNs focussing on profiles (e. g., no YouTube,...) 2 globally popular 2 locally popular (well represented at one ISP) Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 5 / 21

Approach HTTP Header Traces HTTP Header Traces (anonymized) Collected at residential broadband networks of two commercial ISPs Each site connects 20, 000 DSL users Endace monitoring cards for packet capture Table: Overview of anonymized HTTP header traces. ID start date dur sites size rr-pairs ISP-A1 22 Aug 08 noon 24h all >5TB >80M ISP-A2 18 Sep 08 4am 48h all >10 TB >200 M ISP-A3 01 Apr 09 2am 24h all >6TB >170 M ISP-B1 21 Feb 08 7pm 25h OSNs >15GB >2M ISP-B2 14 Jun 08 8pm 38h OSNs >50GB >3M ISP-B3 23 Jun 08 10am >7d OSNs >110 GB >7M Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 6 / 21

Approach HTTP Header Traces HTTP Header Traces (anonymized) Collected at residential broadband networks of two commercial ISPs Each site connects 20, 000 DSL users Endace monitoring cards for packet capture Table: Overview of anonymized HTTP header traces. ID start date dur sites size rr-pairs ISP-A1 22 Aug 08 noon 24h all >5TB >80M ISP-A2 18 Sep 08 4am 48h all >10 TB >200 M ISP-A3 01 Apr 09 2am 24h all >6TB >170 M ISP-B1 21 Feb 08 7pm 25h OSNs >15GB >2M ISP-B2 14 Jun 08 8pm 38h OSNs >50GB >3M ISP-B3 23 Jun 08 10am >7d OSNs >110 GB >7M Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 6 / 21

Approach Manual Traces Manual Traces Data set: Active browsing while monitoring passively For customization Good faith effort to explore the feature set of the OSN Identify site names, relevant cookies, login/logout actions Identify URL patterns for action/category classification For validation Provides ground truth 95% of observed actions covered by manual traces Remaining actions classified as Guessed (if the URL contains a hint: /ajax/editphoto.php) Unknown Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 7 / 21

Approach Category Examples Category Examples Home All actions on the homepage once authenticated Profile Accessing and changing profiles, posting on walls, privacy settings Apps Applications (external and internal), only rr-pairs directed towards OSN servers Photos Uploading, tagging, and managing photos Friends Browsing, inviting, and accepting friends Offline All actions while unauthenticated, e. g., public profile browsing, registering Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 8 / 21

Caveats of our Approach Approach Caveats of our Approach No automated way for producing the URL patterns or extracting the relevant cookies External apps: Not tackled as hosted on different sites Requires customization to all/top external apps Navigation redirects could be leveraged Friendship graph: Cannot tell if two users are friends Requires parsing of payload (privacy!) Requires users to actually access their friend lists during observation Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 9 / 21

Outline Session Characteristics Outline 1 Approach 2 Session Characteristics 3 Feature Popularity 4 Dynamics within Sessions 5 Conclusions Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 10 / 21

Session Characteristics OSN Session Characteristics OSN Session Characteristics Volume of OSN sessions Consistent with a heavy-tailed distribution Facebook sessions: 200kB 10MB (StudiVZ: 50kB 5MB) Typical Web sessions: 100B 10kB, but heavier tail OSN session durations Most sessions are short: 1-5 minutes Few lasting for more than an hour (10% 20%) Very long (days) sessions observed for 7d trace Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 11 / 21

Outline Feature Popularity Outline 1 Approach 2 Session Characteristics 3 Feature Popularity 4 Dynamics within Sessions 5 Conclusions Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 12 / 21

Action Popularity Feature Popularity Action Popularity Active Facebook rr-pairs by category for ISP-A2 Percentage of RR Pairs [%] 0 10 20 30 40 22.9 % messaging 22.7 % apps 19.4 % home 8.9 % profile 8.5 % photos 5.8 % offline 4.7 % friends 2.7 % search 1.5 % groups 1.2 % osnspecific active guessed active verified 0.9 % UNKNOWN 0.4 % other 0.4 % videos 0.1 % ads Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 13 / 21

Feature Popularity Action Popularity Action Popularity Active Facebook rr-pairs by category for ISP-A2 Percentage of RR Pairs [%] 0 10 20 30 40 22.9 % messaging 22.7 % apps 19.4 % home Findings 8.9 % profile 8.5 % photos 5.8 % offline 4.7 % friends 2.7 % search 1.5 % groups 1.2 % osnspecific active guessed active verified small fraction of guessed (<3 %) & UNKNOWN 0.9 % UNKNOWN 0.4 % other 0.4 % videos 0.1 % ads Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 13 / 21

Feature Popularity Action Popularity Action Popularity Active Facebook rr-pairs by category for ISP-A2 Percentage of RR Pairs [%] 0 10 20 30 40 22.9 % messaging 22.7 % apps 19.4 % home Findings 8.9 % profile 8.5 % photos 5.8 % offline 4.7 % friends 2.7 % search 1.5 % groups 1.2 % osnspecific active guessed active verified small fraction of guessed (<3 %) & UNKNOWN Top categories: Messaging, Apps, Home 0.9 % UNKNOWN 0.4 % other 0.4 % videos 0.1 % ads Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 13 / 21

Volume per Category Feature Popularity Volume per Category Active and indirect Facebook rr-pairs by category for ISP-A2 Percentage of HTTP Payload Bytes [%] 0 5 10 15 20 25 30 25.6 % home 20.5 % profile 17.4 % photos 15.2 % apps 7.5 % offline 6.2 % friends 3.5 % messaging 1.3 % search 1.2 % videos download guessed upload guessed download verified upload verified 0.6 % groups 0.5 % UNKNOWN 0.4 % osnspecific 0.1 % other 0 % ads Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 14 / 21

Feature Popularity Volume per Category Volume per Category Active and indirect Facebook rr-pairs by category for ISP-A2 Percentage of HTTP Payload Bytes [%] 0 5 10 15 20 25 30 25.6 % home 20.5 % profile 17.4 % photos 15.2 % apps Findings 7.5 % offline 6.2 % friends 3.5 % messaging 1.3 % search 1.2 % videos download guessed upload guessed download verified upload verified Home, Profile, and Photos rise in importance Upload only for Photos and Apps 0.6 % groups 0.5 % UNKNOWN 0.4 % osnspecific 0.1 % other 0 % ads Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 14 / 21

Feature Popularity Observations Feature Popularity: Observations Active Facebook rr-pairs per session by category for ISP-A2 Percentage 0 20 40 60 80 100 Heterogeneous user base: Many users use only one feature category during a session. profile home messaging friends offline ads groups videos other UNKNOWN photos apps search osnspecific Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 15 / 21

Feature Popularity Observations Feature Popularity: Observations (cont d) OSN and all HTTP rr-pairs per hour for ISP-A2 OSN actions 0 2 4 6 8 rest profile apps messaging photos Per hour usage: Time-of-day effects: similar for OSNs and all HTTP 3 5 7 9 11 13 15 17 19 21 23 1 3 All HTTP 0 4 3 5 7 9 11 13 15 17 19 21 23 1 3 Time [hours] Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 16 / 21

Feature Popularity Requested profiles Requested profiles Approach: Profiles represent a user in an OSN. Requests to profiles indicate interest in a user We distinguish three types of profiles: own, other, and public Method: Count which and how often profiles are requested Findings Types of profile requests: Majority to profiles of other users, 25-35% to own profile, 12% (22%) to public profiles: Facebook Pages (LinkedIn) Profile requests per Facebook session: mean number of requested profiles: 6 unique profiles: only 3 Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 17 / 21

Outline Dynamics within Sessions Outline 1 Approach 2 Session Characteristics 3 Feature Popularity 4 Dynamics within Sessions 5 Conclusions Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 18 / 21

Dynamics within Sessions Activity vs. Inactivity Periods Activity vs. Inactivity Periods Apply within session inactivity timeout of 5min: Sessions >1min: 50 % of users are active all time Sessions >40min: >95 % have inactivity periods Action after inactivity Top categories: Messaging, Home, Offline Distribution changes with the length of the pause Facebook action after inactivity period for ISP-A2 0 10 20 30 40 5min 10min 20min messaging home offline profile photos friends search remain Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 19 / 21

Dynamics within Sessions Feature Sequences Feature Sequences Click sequences of Facebook for ISP-A2: Global transition probabilities 3% friends 5% profile arrows without labels are 1% 20% messaging 3% 2% 3% 2% 2% photos 8% 4% 5% home 9% 2% offline 2% Similar findings as Benevenuto et al for Orkut (IMC 09) Findings Messaging traps users; Home, Photos and Profile attract users to stay Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 20 / 21

Conclusions Summary Summary Findings: Most of the sessions are short (few minutes) and small in terms of volume (several MBytes) Long sessions are dominated by inactivity periods Top action categories are: Messaging, Apps, Home, Profile, and Photos. Facebook users are trapped by Messaging and Photos Future Work Expand analysis to other OSNs/external apps, and overcome caveats Evaluate new OSN designs with OSN user model (e. g., PeerSoN a ) a www.peerson.net Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 21 / 21

Summary Conclusions Summary Findings: Most of the sessions are short (few minutes) and small in terms of volume (several MBytes) Long sessions are dominated by inactivity periods Top action categories are: Messaging, Apps, Home, Profile, and Photos. Facebook users are trapped by Messaging and Photos Time for Questions? Future Work Expand analysis to other OSNs/external apps, and overcome caveats Evaluate new OSN designs with OSN user model (e. g., PeerSoN a ) a www.peerson.net Fabian Schneider (TU Berlin/DT Labs) Understanding OSN Usage IMC 2009 21 / 21