A semantic web based framework for social network access control

ABSTRACT

The existence of on-line social networks that include person specific information creates interesting opportunities for various applications ranging from marketing to community organization. On the other hand, security and privacy concerns need to be addressed for creating such applications. Improving social network access control systems appears as the first step toward addressing the existing security and privacy concerns related to on-line social networks. To address some of the current limitations, we propose an extensible fine grained access control model based on semantic web tools. In addition, we propose authorization, admin and filtering policies that depend on trust relationships among various users, and are modeled using OWL and SWRL. Besides describing the model, we present the architecture of the framework in its support.

REFERENCES

• 1: Bader Ali , Wilfred Villegas , Muthucumaru Maheswaran, A trust based approach for protecting user data in social networks, Proceedings of the 2007 conference of the center for advanced studies on Collaborative research, October 22-25, 2007, Richmond Hill, Ontario, Canada [doi>10.1145/1321211.1321251]
• 2: S. Berteau. Facebook's misrepresentation of Beacon's threat to privacy: Tracking users who opt out or are not logged in. CA Security Advisor Research Blog, Mar. 2007.
• 3: D. Brickley and L. Miller. FOAF vocabulary specification 0.91. RDF Vocabulary Specification, Nov. 2007. Available at http://xmlns.com/foaf/0.1.
• 4: B. Carminati, E. Ferrari, and A. Perego. Enforcing Access Control in Web-based Social Networks. ACM Transactions on Information & System Security, 2008. To appear, 4(3):191--233, 2001.
• 5: B. Carminati, E. Ferrari, and A. Perego. Security and privacy in social networks. In M. Khosrow-Pour, editor, Encyclopedia of Information Science and Technology, 2nd Edition, volume VII, pages 3369--3376. IGI Publishing, Sept. 2008.
• 6: H.-C. Choi, S. R. Kruk, S. Grzonkowski, K. Stankiewicz, B. Davis, and J. G. Breslin. Trust models for community aware identity management. In Identity, Reference, and the Web Workshop (IRW 2006), 2006. Available at: http://www.ibiblio.org/hhalpin/irw2006/skruk.pdf.
• 7: Najeeb Elahi , Mohammad M. R. Chowdhury , Josef Noll, Semantic Access Control in Web Based Communities, Proceedings of the 2008 The Third International Multi-Conference on Computing in the Global Information Technology (iccgi 2008), p.131-136, July 27-August 01, 2008 [doi>10.1109/ICCGI.2008.46]
• 8: T. Finin , A. Joshi , L. Kagal , J. Niu , R. Sandhu , W. Winsborough , B. Thuraisingham, ROWLBAC: representing role based access control in OWL, Proceedings of the 13th ACM symposium on Access control models and technologies, June 11-13, 2008, Estes Park, CO, USA [doi>10.1145/1377836.1377849]
• 9: I. Horrocks, P. F. Patel-Schneider, H. Boley, S. Tabet, B. Grosof, and M. Dean. SWRL: A Semantic Web rule language combining OWL and RuleML. W3C Member Submission, World Wide Web Consortium, May 2004. Available at: http://www.w3.org/Submission/SWRL.
• 10: S. R. Kruk, S. Grzonkowski, H.-C. Choi, T. Woroniecki, and A. Gzella. D-FOAF: Distributed identity management with access rights delegation. In Proceedings of the 1st Asian Semantic Web Conference (ASWC 2006), LNCS 4185, pages 140--154. Springer Verlag, 2006.
• 11: Peter Mika, Social Networks and the Semantic Web (Semantic Web and Beyond), Springer-Verlag New York, Inc., Secaucus, NJ, 2007
• 12: G. Tonti, J. Bradshaw, R. Jeffers, R. Montanari, N. Suri, and A. Uszok. Semantic Web Languages for Policy Representation and Reasoning: A Comparison of KAoS, Rei, and Ponder. 2003.
• 13: World Wide Web Consortium. Defining n-ary relations on the semantic web, 2006. Available at:http://www.w3.org/TR/swbp-n-aryRelations/.
• 14: World Wide Web Consortium. Status for resource description framework (rdf) model and syntax specification. Available at: http://www.w3.org/1999/.status/PR-rdf-syntax-19990105/status.
• 15: M. I. Yague, M. del-mar Gallardo, and A. MaÜna. Semantic access control model: A formal specification. In ESORICS 2005, pages 24--43, 2005.

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Access controls

Additional Classification:
  I. Computing Methodologies
  I.2 ARTIFICIAL INTELLIGENCE
      I.2.4 Knowledge Representation Formalisms and Methods
          Subjects: Semantic networks

General Terms:
Design, Security, Theory

Keywords:
access control, semantic web, social networks