Collective privacy management in social networks

ABSTRACT

Social Networking is one of the major technological phenomena of the Web 2.0, with hundreds of millions of people participating. Social networks enable a form of self expression for users, and help them to socialize and share content with other users. In spite of the fact that content sharing represents one of the prominent features of existing Social Network sites, Social Networks yet do not support any mechanism for collaborative management of privacy settings for shared content. In this paper, we model the problem of collaborative enforcement of privacy policies on shared data by using game theory. In particular, we propose a solution that offers automated ways to share images based on an extended notion of content ownership. Building upon the Clarke-Tax mechanism, we describe a simple mechanism that promotes truthfulness, and that rewards users who promote co-ownership. We integrate our design with inference techniques that free the users from the burden of manually selecting privacy preferences for each picture. To the best of our knowledge this is the first time such a protection mechanism for Social Networking has been proposed. In the paper, we also show a proof-of-concept application, which we implemented in the context of Facebook, one of today's most popular social networks. We show that supporting these type of solutions is not also feasible, but can be implemented through a minimal increase in overhead to end-users.

REFERENCES

• 1: A. Acquisti and R. Gross. Imagined communities: Awareness, Information Sharing, and Privacy on the Facebook. In Proc. of Privacy Enhancing Technologies, pages 36--58. Springer, 2006.
• 2: D. Beaver. 10 billion photos. http://www.facebook.com/note.php?note_id=30695603919, October 2008.
• 3: S. P. Borgatti and M. G. Everett. A graph-theoretic perspective on centrality. Social Networks, 28(4):466--484, October 2006.
• 4: Barbara Carminati , Elena Ferrari, Privacy-Aware Collaborative Access Control in Web-Based Social Networks, Proceeedings of the 22nd annual IFIP WG 11.3 working conference on Data and Applications Security, July 13-16, 2008, London, UK [doi>10.1007/978-3-540-70567-3_7]
• 5: B. Carminati, E. Ferrari, and A. Perego. Rule-based access control for social networks. In OTM Workshops (2), pages 1734--1744, 2006.
• 6: L. Chen, X. Den, Q. Fang, and F. Tian. Condorcet winners for public goods. In Annals of Operations Research, volume 137, pages 229--242, 2005.
• 7: E. H. Clarke. Multipart pricing of public goods. In Public Choice 11, pages 17--33, 1971.
• 8: E. H. Clarke. Multipart Pricing of Public Goods: An example. In Public Price for Public Products, Urban Inst., 1972.
• 9: Marc Davis , Michael Smith , John Canny , Nathan Good , Simon King , Rajkumar Janakiraman, Towards context-aware face recognition, Proceedings of the 13th annual ACM international conference on Multimedia, November 06-11, 2005, Hilton, Singapore [doi>10.1145/1101149.1101257]
• 10: E. Ephrati and J. S. Rosenschein. The Clarke-tax as a consensus mechanism among automated agents. In National Conference on Artificial Intelligence, pages 173--178, 1991.
• 11: E. Ephrati and J. S. Rosenschein. Voting and multi-agent consensus. 1991.
• 12: Eithan Ephrati , Jeffrey S. Rosenschein, Deriving consensus in multiagent systems, Artificial Intelligence, v.87 n.1-2, p.21-74, Nov. 1996 [doi>10.1016/0004-3702(95)00105-0]
• 13: Facebook. Facebook web site. http://www.facebook.com/.
• 14: A. Felt. Defacing Facebook: A security case study.
• 15: A. Felt and D. Evans. Privacy protection for social networking platforms. In Proceedings of Web 2.0 Security and Privacy 2008 (in conjunction with 2008 IEEE Symposium on Security and Privacy), 2008.
• 16: C. Gates. Access control requirements for Web 2.0 Security and Privacy. In IEEE Web 2.0 Privacy and Security Workshop, 2007.
• 17: Roxana Geambasu , Magdalena Balazinska , Steven D. Gribble , Henry M. Levy, Homeviews: peer-to-peer middleware for personal data sharing applications, Proceedings of the 2007 ACM SIGMOD international conference on Management of data, June 11-14, 2007, Beijing, China [doi>10.1145/1247480.1247508]
• 18: K. K. Gollu, S. Saroiu, and A. Wolman. A social networking-based access control scheme for personal content. In Proceedings of the 21st ACM Symposium on Operating Systems Principles (SOSP '07)-- Work-in-Progress Session, 2007.
• 19: Ralph Gross , Alessandro Acquisti , H. John Heinz, III, Information revelation and privacy in online social networks, Proceedings of the 2005 ACM workshop on Privacy in the electronic society, November 07-07, 2005, Alexandria, VA, USA [doi>10.1145/1102199.1102214]
• 20: Jens Grossklags , Nicolas Christin , John Chuang, Secure or insure?: a game-theoretic analysis of information security games, Proceeding of the 17th international conference on World Wide Web, April 21-25, 2008, Beijing, China [doi>10.1145/1367497.1367526]
• 21: M. Hart, R. Johnson, and A. Stent. More content -- less control: Access control in the Web 2.0. In IEEE Web 2.0 Privacy and Security Workshop, 2007.
• 22: G. Hobgen. Security issues and recommendations for online social networks. ENISA Position Paper N. 1, 2007.
• 23: J. Jiang and D. Conrath. Semantic similarity based on corpus statistics and lexical taxonomy. In Proceedings of ROCLING X, Sep 1997.
• 24: A. Lenhart and M. Madden. Teens, privacy & online social networks. Pew Internet & American Life Project, 18 April 2007.
• 25: Mohammad Mannan , Paul C. van Oorschot, Privacy-enhanced sharing of personal content on the web, Proceeding of the 17th international conference on World Wide Web, April 21-25, 2008, Beijing, China [doi>10.1145/1367497.1367564]
• 26: A. Mas-Colell and M. D. Whinston. Micro-Economic Theory. Chapter 23. Oxford University Press, fourth edition, 1998.
• 27: A. Mathes. Folksonomies: Cooperative classification and communication through shared metadata. http://www.adammathes.com/academic/computer-mediated-communication/folk%sonomies.html, 2004.
• 28: George A. Miller, WordNet: a lexical database for English, Communications of the ACM, v.38 n.11, p.39-41, Nov. 1995 [doi>10.1145/219717.219748]
• 29: Mor Naaman , Ron B. Yeh , Hector Garcia-Molina , Andreas Paepcke, Leveraging context to resolve identity in photo albums, Proceedings of the 5th ACM/IEEE-CS joint conference on Digital libraries, June 07-11, 2005, Denver, CO, USA [doi>10.1145/1065385.1065430]
• 30: C. L. NB Ellison, C Steinfield. Benefits of Facebook 'Friends:' social capital and college students' use of online social network. Journal of Computer Mediated Communication-Electronic, 2007.
• 31: M. E. J. Newman. Scientific collaboration networks. ii. shortest paths, weighted networks, and centrality. Physical Review E, 64(1):016132, June 2001.
• 32: Giuseppe Pirró , Nuno Seco, Design, Implementation and Evaluation of a New Semantic Similarity Metric Combining Features and Intrinsic Information Content, Proceedings of the OTM 2008 Confederated International Conferences, CoopIS, DOA, GADA, IS, and ODBASE 2008. Part II on On the Move to Meaningful Internet Systems, November 09-17, 2008, Monterrey, Mexico [doi>10.1007/978-3-540-88873-4_25]
• 33: P. Ray. Independence of irrelevant alternatives. In Econometrica, volume 41, pages 987--991, 1973.
• 34: David Rosenblum, What Anyone Can Know: The Privacy Risks of Social Networking Sites, IEEE Security and Privacy, v.5 n.3, p.40-49, May 2007 [doi>10.1109/MSP.2007.75]
• 35: Sarah Spiekermann , Jens Grossklags , Bettina Berendt, E-privacy in 2nd generation E-commerce: privacy preferences versus actual behavior, Proceedings of the 3rd ACM conference on Electronic Commerce, p.38-47, October 14-17, 2001, Tampa, Florida, USA [doi>10.1145/501158.501163]
• 36: H. R. Varian. System Reliability and Free Riding. In in Economics of Information Security, pages 1--15. Kluwer Academic Publishers, 2002.
• 37: Changjie Wang , Ho-fung Leung, A secure and private clarke tax voting protocol without trusted authorities, Proceedings of the 6th international conference on Electronic commerce, October 25-27, 2004, Delft, The Netherlands [doi>10.1145/1052220.1052290]
• 38: Xian Wu , Lei Zhang , Yong Yu, Exploring social annotations for the semantic web, Proceedings of the 15th international conference on World Wide Web, May 23-26, 2006, Edinburgh, Scotland [doi>10.1145/1135777.1135839]

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.4 System Management
          Subjects: Centralization/decentralization

Additional Classification:
  J. Computer Applications
  J.6 COMPUTER-AIDED ENGINEERING
  J.m MISCELLANEOUS

General Terms:
Security

Keywords:
game theory, privacy, social networks