Privacy-Aware Access Control in Social Networks: Issues and Solutions

Access control in online social networks (OSNs) is becoming an urgent need due to the amount of data managed by social networks and their sensitivity. Performing access control in a social network has many differences with respect to performing access con

  • PDF / 293,038 Bytes
  • 15 Pages / 439.37 x 666.142 pts Page_size
  • 30 Downloads / 201 Views

DOWNLOAD

REPORT


Privacy-Aware Access Control in Social Networks: Issues and Solutions Barbara Carminati and Elena Ferrari

Abstract Access control in online social networks (OSNs) is becoming an urgent need due to the amount of data managed by social networks and their sensitivity. Performing access control in a social network has many differences with respect to performing access control in a traditional data management system, in terms of both the policy language to support and the reference architecture for access control enforcement. Moreover, it is fundamental to also consider privacy issues connected to access control and to devise appropriate privacy-preserving access control systems. The aim of this chapter is to first discuss which are the requirements of privacy-aware access control to OSN resources and then to review the literature in view of the identified requirements. Finally, the chapter discusses future research directions in the field.

9.1 Introduction Online social networks (OSNs) are platforms that allow people to publish details about themselves and to connect to other members of the network through various relationships. The potentialities of these services are enormous, from knowledge sharing to social search, to establish community of practices1 at the enterprise level, just to mention few of OSN applicability domains. Recently, the popularity of OSNs is increasing significantly. For example, Facebook now claims to have more than 300 million active users.2 Also the amount of shared digital contents is enormous. For instance, considering once again Facebook, it now claims to have more than 2 billion photos and 14 million videos uploaded to the site each month, whereas more

B. Carminati (B) Dipartimento di Informatica e Comunicazione, Università degli Studi dell’Insubria, Via Mazzini 5, 21100 Varese, Italy e-mail: [email protected] 1 2

http://en.wikipedia.org/wiki/Social_search http://www.facebook.com/press/info.php?statistics

J. Nin, J. Herranz (eds.), Privacy and Anonymity in Information Management Systems, Advanced Information and Knowledge Processing, C Springer-Verlag London Limited 2010 DOI 10.1007/978-1-84996-238-4_9, 

181

182

B. Carminati

than 2 billion pieces of content (web links, news stories, blog posts, notes, photos, etc.) are shared each week. The existence of this huge amount of data, including person-specific information, creates both interesting research challenges and security and privacy threats. For example, social network data could be used for marketing products to the right customers. At the same time, security and privacy concerns can prevent such efforts in practice [4]. Therefore, many researchers have started to work on improving the access control systems today provided by OSNs. The motivation is that current OSNs implement very basic access control models, by simply making users able to decide which information are accessible by other members by marking a given item as public, private, or accessible by their direct contacts. In order to give more flexibilit