Social Networking System (SNS) like Facebook and Twitter have gained more popularity in this new era. It allows millions of individuals to create online profiles and share their personal information with vast networks of friend's. SNS allows third party extensions to access the users' information through Application Programming Interface (API). Since millions of users are using these sites it will lead to privacy problems and leakage of private information. This leakage happens without the knowledge of user, which leads to security problems like identity theft and phishing attack. Unknown user taking the information without our knowledge is called inference attack. This paper uses a permission based protection mechanism which limits the direct access of user data. Once an extension is certified by the user to access data from users' profile, then there is no more control on how it uses the data. Third party application can be built on trusted or un-trusted server. If it is an un-trusted server it will lead to inference attack and malicious user may use the information for unintended purposes and our data will be at risk. The main objective of this project is to enable the security access control scheme against inference attack.

Data stored in the database includes personnel and sensitive data. Privacy policies in the database management system can control collection, access and disclosure of data. Policies are used to specify obligation. Obligation is certain actions or condition which has to be satisfied for accessing data. The main objective this project is to enable a monitor for implementing privacy policies which specifies obligations. Based on the obligations monitor can control the SQL code execution. The approach is automated, systematic and can work with most of the relational DBMS.