Evaluation of Safeness and Functionality in Applied Technologies for Mobile Messengers = 모바일 메신저들의 적용기술의 안전성과 기능성에 대한 평가

다국어 초록 (Multilingual Abstract)

Recently, KakaoTalk users seek secure messengers with fears of ‘possible’ censorship over a mobile messenger. Instead German messenger “Telegram” is gaining popularity in South Korea. Are the known as secure messengers actually secure? In this paper, we evaluate secure mobile messengers in terms of private information protection. We establish the fourteen criteria to evaluate the functionality of messenger apps including communication encryption in transit, the possibility of leakage of decrypted messages via server, an encryption algorithm, a key exchange algorithm, an ephemeral message application, etc. Line, Telegram, Snapchat, WhatsApp, Wickr, Facebook Messenger and KakaoTalk, which have many worldwide and domestic users, are to be targeted. Wickr is ranked at the top of the evaluation, followed by Telegram and Line but KakaoTalk and Snapchat are ranked at the bottom of the evaluation list.

참고문헌 (Reference)

1 "Wickr Messenger" Wickr

2 "Wickr Messaging Protocol-Technical Paper" Wickr

3 "When Does Snapchat Delete Snaps and Chats?" Snapchat Supprot

4 "WhatsApp-Update: Gut verschlüsselt, aber nicht komplett sicher" Der Spiegel

5 "WhatsApp blog"

6 "WhatsApp Encryption Overview, Technical white paper" WhatsApp

7 "Tweeter apply 'Right to be forgotten' for Korea" MK News

8 "Transport Layer Security-Dealing with man-in-the- middle attacks" Wikipedia

9 "The Dispute over Censorship about KakaoTalk" Kakao blog

10 Namu Wiki, "Telegram-Security"

11 Pavel Durov, "Telegram was kicked out from Play Store for a few hours today due to @naver_line's actions"

12 "Telegram Reveals Korean Version" Hankookilbo

13 "Target and Snapchat suffer major data breaches" Elsevier BV 2014 (2014): 1-3, 2014

14 "Talking about KakaoTalk web address link utilizes in Daum web search" Kakao blog

15 "Snapchat Unveiled: an Examination of Snapchat on Android Devices" Decipher Forensics

16 "Snapchat - GibSec Full Disclosure" Gibson Security

17 "Smishing Malware Steals KakaoTalk DB" Security News

18 "Secure Messaging Scorecard" Electronic Frontier Foundation

19 Pioneer of Security Research, "Secure Chat Messenger App Security Check"

20 "Secret chats, end-to-end encryption" Telegram

21 "Right to be forgotten begins in Korea" Newsis

22 "Privacy Mode Begin Today" Kakao blog

23 Joongangilbo, "New Malware using Facebook"

24 "Messenger ‘Line’ Revealed Security Vulnerabili" CNET Korea

25 "Messenger Secret Conversations-Technical Whitepaper" Facebook

26 "Marker Group-Gangwondo, ‘Right to be forgotten’ Business Agreement" ZDNet Korea

27 "Making Wickr Weaker" Asterisk Labs

28 "Line, ‘Letter Sealing’-The World First E2EE Technology Through Smart Phone and PC Platform" Line

29 "LINE Security Bug Bounty Program"

30 DaumKakao, "KakaoTalk serves group chats"

31 "KakaoTalk" Wikipedia

32 "Is Telegram Really Secure?-4 Major Privacy Issues Raised by Researcher" The Hacker News

33 "How Wickr’s Encryption Works" Wickr

34 "Hackers threaten to post more Snapchat photos online" BBC News

35 Korea Communication Commission, "Guideline for Right to exclude his own Internet postings"

36 Tarun Mehrotra, "Forensic Analysis of Wickr Application on Android Devices" 2013

37 "For more safer dialogue: Letter Sealing" Line Engineers’ Blog

38 "Facebook planning encrypted version of its Messenger bot, sources say" The Guardian

39 "Facebook Messenger – Malware" ZDNet Korea

40 "Facebook Messenger Celebrates Reaching 1 Billion Monthly Active User" Facebook Newsroom

41 "FBI Unlocked iPhone without Apple’s Assistance" Ohmynews

42 "Actually, KakaoTalk Messages are" Kakao blog

43 "$300,000 for Cracking Telegram Encryption" Telegram