[Paper Review] Gaming the Game: Honeypot Venues Against Cheaters in Location-based Social Networks

Konstantinos Pelechrinis, Prashant Krishnamurthy+1 more|arXiv (Cornell University)|Oct 16, 2012

Mobile Crowdsensing and Crowdsourcing14 references8 citations

TL;DR

This paper proposes a honeypot venue-based system enhanced with a challenge-response mechanism to detect and flag fake check-ins in location-based social networks (LBSNs). By deploying deceptive venues that require users to answer venue-specific questions to check in, the scheme identifies cheaters who cannot answer correctly, thereby reducing noise in user-generated spatial data and improving the reliability of services like recommendations.

ABSTRACT

The proliferation of location-based social networks (LBSNs) has provided the community with an abundant source of information that can be exploited and used in many different ways. LBSNs offer a number of conveniences to its participants, such as - but not limited to - a list of places in the vicinity of a user, recommendations for an area never explored before provided by other peers, tracking of friends, monetary rewards in the form of special deals from the venues visited as well as a cheap way of advertisement for the latter. However, service convenience and security have followed disjoint paths in LBSNs and users can misuse the offered features. The major threat for the service providers is that of fake check-ins. Users can easily manipulate the localization module of the underlying application and declare their presence in a counterfeit location. The incentives for these behaviors can be both earning monetary as well as virtual rewards. Therefore, while fake check-ins driven from the former motive can cause monetary losses, those aiming in virtual rewards are also harmful. In particular, they can significantly degrade the services offered from the LBSN providers (such as recommendations) or third parties using these data (e.g., urban planners). In this paper, we propose and analyze a honeypot venue-based solution, enhanced with a challenge-response scheme, that flags users who are generating fake spatial information. We believe that our work will stimulate further research on this important topic and will provide new directions with regards to possible solutions.

Motivation & Objective

• Address the growing problem of fake check-ins in location-based social networks (LBSNs), which degrade data quality and service reliability.
• Identify and mitigate two types of cheaters: monetary cheaters seeking discounts and gamer cheaters pursuing virtual rewards.
• Propose a detection mechanism that does not require trusted third parties, enabling deployment solely by LBSN providers.
• Improve the trustworthiness of aggregated check-in data for applications such as recommendations, urban planning, and mobility studies.

Proposed method

• Deploy honeypot venues (HVs) that mimic real venues but are not publicly known, to lure cheaters.
• Implement a challenge-response protocol where users must answer a venue-specific question (e.g., 'What is today’s special?') to check in.
• Use a probabilistic model to estimate the likelihood of a cheater checking in to an HV based on the number of real and honeypot venues.
• Leverage venue owners to manage challenge updates, balancing detection effectiveness with operational cost.
• Apply a threshold-based detection mechanism using function $ h $ to flag users who fail multiple challenge-response checks.
• Design the system to be deployable by LBSN providers alone, avoiding reliance on external trusted entities.

Experimental results

Research questions

• RQ1 How can fake check-ins in LBSNs be detected without relying on external trusted infrastructure?
• RQ2 What is the effectiveness of honeypot venues combined with challenge-response mechanisms in identifying cheaters?
• RQ3 How does the presence of fake check-ins degrade the performance of data-driven services like recommendations?
• RQ4 What trade-offs exist between detection accuracy and operational cost in maintaining challenge-response systems?
• RQ5 How can LBSN providers integrate honeypot venues into their existing systems without disrupting real user experience?

Key findings

• The proposed honeypot venue system with challenge-response significantly increases the probability of detecting cheaters by requiring knowledge of venue-specific, time-sensitive information.
• The method reduces the impact of fake check-ins on data-driven services such as recommendations by filtering out untrustworthy data sources.
• The scheme is deployable solely by LBSN providers, eliminating the need for third-party trust or complex cryptographic mechanisms.
• While no quantitative evaluation was performed due to the need for large-scale HV deployment, the theoretical model shows that high detection probability is achievable with $ \lambda \gg \phi $, where $ \lambda $ is the number of honeypots and $ \phi $ the number of real venues.
• Monetary cheaters may still provide some indirect preference signals, but gamer cheaters—whose fake check-ins are purely for virtual rewards—significantly degrade data quality and are more harmful to recommendation systems.
• The system enables providers to flag or ignore data from cheaters without banning users, preserving system usability while maintaining data integrity.