Beyond User-to-User Access Control for Online Social Networks

Shehab, Mohamed; Squicciarini, Anna; Ahn, Gail-Joon

doi:10.1007/978-3-540-88625-9_12

Cited by 24 publications

(15 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Researchers have examined various security mechanisms for protecting personal information, such as on social network sites [3,8,21]. Others have investigated interfaces for representing such policies [18,20,24].…”

Section: Introductionmentioning

confidence: 99%

The impact of social navigation on privacy policy configuration

Besmer

Watson

Lipford

2010

Proceedings of the Sixth Symposium on Usable Privacy and Security

View full text Add to dashboard Cite

Social navigation is a promising approach to help users make better privacy and security decisions using community knowledge and expertise. Social navigation has recently been applied to several privacy and security systems such as peer-topeer file sharing, cookie management, and firewalls. However, little empirical evaluation of social navigation cues has been performed in security or privacy systems to understand the real impact such knowledge has on user behavior and the resulting policies. In this paper, we explore the application of social navigation to access control policy configuration using an empirical between subjects study. Our results indicate that community information does impact user behavior, but only when the visual representation of the cue is sufficiently strong.

show abstract

Section: Introductionmentioning

confidence: 99%

The impact of social navigation on privacy policy configuration

Besmer

Watson

Lipford

2010

Proceedings of the Sixth Symposium on Usable Privacy and Security

View full text Add to dashboard Cite

show abstract

“…Several works address the problem of untrustworthy TPAs by limiting their access to sensitive user data in the first place [1,3,5,21,22]: Anthonysamy et al [1] implement a trusted proxy through which all requests to the Facebook API are redirected. Responses from Facebook are only forwarded to the TPA after sensitive data was sanitized in correspondence with the user's configuration.…”

Section: Limitationsmentioning

confidence: 99%

Compliance Monitoring of Third-Party Applications in Online Social Networks

Kelbert

Fromm

2016

2016 IEEE Security and Privacy Workshops (SPW)

View full text Add to dashboard Cite

Abstract-With the widespread adoption of Online Social Networks (OSNs), users increasingly also use corresponding thirdparty applications (TPAs), such as social games and applications for collaboration. To improve their social experience, TPAs access users' personal data via an API provided by the OSN. Applications are then expected to comply with certain security and privacy policies when handling the users' data. However, in practice, they might store, use, and distribute that data in all kinds of unapproved ways. We present an approach that transparently enforces security and privacy policies on TPAs that integrate with OSNs. To this end, we integrate concepts and implementations from the research areas of data usage control and information flow control. We instantiate these results in the context of TPAs in OSNs in order to enforce compliance with security and privacy policies that are provided by the OSN operator. We perform a preliminary evaluation of our approach on the basis of a TPA that integrates with the Facebook API.

show abstract

“…We found their research indicates user's utilization of community data in making their privacy descisions.they proposed two approaches for reducing the effects and we believe the can complement our work. Shehab et al [10] proposed an access control framework which allows users to specify their data attributes to share with applications which demands many changes to the existing authorization models and also requires developers to go through a prominent process of deployment model. Our proposed framework consolidate seamlessly into existing authorization model and requires no additional efforts from the developers as well.…”

Section: Related Workmentioning

confidence: 99%

Provision of overcoming the weakness of OAuth 20 protocol in online social networking

Phogat¹

2015

IJRITCC

View full text Add to dashboard Cite

Abstract-The Open Authorization Protocol (OAuth 2.0) was introduced to provide secure and efficient method for providing authorization to the third party applications without sharing user's credentials. Major social internet players like Facebook, Google and Twitter implement their API's based on this protocol for enhancing the user experience of social sharing and sign-on. However OAuth doesn't provides the necessary fine-grained access control or any suggestions. We have proposed an enhancement to the OAuth 2.0 authorization which will provide provision of fine grained authorization suggestions to the users while granting permission to the third party applications in online social networking. Our multi criteria suggestion based model method will utilizes user-based, application based, category-based combination filtering systems. Our category-based combination filtering system is based on decision made by the previous users and the application based permission requests for enhancing the user's privacy control. We have provided a provision for strengthening the OAuth 2.0 protocol in online social networking websites by proposing OAuth 2.0 extension as a browser based extension which allows various users to compose their privacy settings at the time of installing third party applications.

show abstract

Beyond User-to-User Access Control for Online Social Networks

Cited by 24 publications

References 15 publications

The impact of social navigation on privacy policy configuration

The impact of social navigation on privacy policy configuration

Compliance Monitoring of Third-Party Applications in Online Social Networks

Provision of overcoming the weakness of OAuth 20 protocol in online social networking

Contact Info

Product

Resources

About