Cyber Security Concerns in Social Networking Service

Abstract

Today’s world is unimaginable without online social networks. Nowadays, millions of people connect with their friends and families by sharing their personal information with the help of different forms of social media. Sometimes, individuals face different types of issues while maintaining the multimedia contents like, audios, videos, photos because it is difficult to maintain the security and privacy of these multimedia contents uploaded on a daily basis. In fact, sometimes personal or sensitive information could get viral if that leaks out even unintentionally. Any leaked out content can be shared and made a topic of popular talk all over the world within few seconds with the help of the social networking sites. In the setting of Internet of Things (IoT) that would connect millions of devices, such contents could be shared from anywhere anytime. Considering such a setting, in this work, we investigate the key security and privacy concerns faced by individuals who use different social networking sites differently for different reasons. We also discuss the current state-of-the-art defense mechanisms that can bring somewhat long-term solutions to tackling these threats.

Analysis of Cybersecurity Standard and Framework Components

“…Personal information or sensitive data that is leaked to the public accidentally can go viral in a matter of seconds. Files, images, or videos can become popular topics of conversation worldwide through social networking sites [6]. The public can see the lack of knowledge in society, organizations or businesses regarding the role of cybersecurity standards and frameworks.…”

Defense in Depth: Multilayer of security

“…Security threats become the major concern for every user, security administrators, and even the management level of any organization since the number of attacking activities are in a repaid manner due to different motivation aspects such as financial gain, policies motivation, or personal gain [1] [2]. Defense in depth means placing a multi-layer of security defense where diverse strategies and controls are implemented and deployed to mitigate multiple kinds of risks could organization faced.…”

A Tutorial on Cross-Site Scripting Attack

“…Previous research work reveals that XSS worms can be planted in specific places in a Social Networking Service [9,19] in order to hijack the user's account. The attacker tries to lure a user to click on the infected link or even visit an infected web page in order to execute the malicious script at the browser side.…”