Privacy Implications of Privacy Settings and Tagging in Facebook - - PowerPoint PPT Presentation
Privacy Implications of Privacy Settings and Tagging in Facebook 1 Privacy Implications of Privacy Settings and Tagging in Facebook Stan Damen, Nicola Zannone Eindhoven University of Technology 10th VLDB Workshop on Secure Data Management
Privacy Implications of Privacy Settings and Tagging in Facebook 1
Eindhoven University of Technology
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 2 Motivations
◮ millions of users across the world
◮ Finding old friends ◮ Building communities around common
◮ Gaming ◮ ...
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 3 Motivations
◮ Posting ◮ Sharing pictures ◮ Profile (partially) publicly available ◮ Third party applications
◮ games, online marketplace
◮ Tagging
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 4 Motivations
◮ Social network privacy practices: related to the collection and
◮ user tracking (e.g., Facebook “Like” button), user profiling for
◮ Information disclosure to contacts: misuse of personal information
◮ e.g., cyberstalking, identity theft, discrimination
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 5 Motivations
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 6 Motivations
◮ Privacy legislation imposes stringent requirements on
◮ Upcoming European regulation on data protection
◮ user empowerment in controlling own data ◮ easier access own data ◮ right to be forgotten ◮ right to data portability
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 7 Motivations
◮ Social networks provide control tools
◮ Privacy setting ◮ Facebook “View As” functionality ◮ Google Dashboard
◮ False confidence of being in control of data
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 7 Motivations
◮ Social networks provide control tools
◮ Privacy setting ◮ Facebook “View As” functionality ◮ Google Dashboard
◮ False confidence of being in control of data
◮ Understand exiting privacy controls for collaborative systems. ◮ Focus on privacy impact of privacy settings and tagging in Facebook.
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 8
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 9 Facebook Profile
Posted_By
Owns 1
*
1 1 1 Made_By
1 1
Belong_To 1 Uploaded_By
*
Issued_By Refer_To 1 1
*
1 1 1 * 1
* *
1
*
1
*
1 1
* * *
1
* *
Defined_By
*
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 10 Facebook Profile
◮ Settings for visibility
◮ Specify who can view an object ◮ Defined in terms of groups (only me, friend, friend of friend, custom
◮ Defined for each object (album, photo, post, etc.)
◮ Settings for posting (define who can post) ◮ Settings for the visibility of new objects
◮ User friendly ◮ By default, more permissive settings
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 11 Facebook Profile
◮ Tagging allows users to share information faster and easier ◮ A tag is an unambiguous link to another user ◮ Additional “features”
◮ Modify visibility of tagged object ◮ Create a copy of the tagged object in the profile of the tagged user
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 12 Facebook Profile
◮ Permissions: view, delete, post, comment, tag ◮ Depending on the role
◮ Data host: all permissions ◮ Data provider: delete his post (if still in visibility of the post) ◮ Tag target: delete tag
◮ Depending on privacy setting
◮ users can see a post if they are in the visibility of the post
◮ Privacy settings can only be seen by data host
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 13 Privacy Issues
◮ Eve can see contents on Bob’s profile without Bob knowing it
◮ Facebook’s “View As” functionality does not help
◮ Bob can restrict visibility to only me or friend
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 14 Privacy Issues
◮ Alice cannot remove Eve from the visibility of the post without
◮ Alice depends on Bob’s settings
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 15 Privacy Issues
◮ Alice (data subject) cannot influence visibility of the post ◮ Alice can only remove the tag
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 16 Privacy Issues
◮ User(s) in control of information
◮ data host in control ◮ privacy concerns data subject
◮ Object-centric
◮ copies are treated as independent objects
◮ Business-driven
◮ Personal data (and their sharing) are a business asset ◮ By default, more permissive restrictions
◮ Tagging
◮ visibility difficult to control ◮ can be used to identify data subject(s), but not main goal ◮ additional risk of data exposure
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 17 Proof-of-Concept
◮ Implementation of privacy settings in Facebook
◮ Actual view on information (vs. object view)
◮ Limitation
◮ Need access to privacy settings of users ◮ Can only be deployed as a functionality of the social network
Privacy Implications of Privacy Settings and Tagging in Facebook
Privacy Implications of Privacy Settings and Tagging in Facebook 18 Conclusions & Future Work
◮ Privacy issues mainly caused by design decisions ◮ Need for novel access control model for collaborative systems
◮ able to consider role of users wrt data ◮ able to support novel modalities of social communication (e.g.,
◮ Need for user-friendly transparency tools
◮ visualize who can see information ◮ notify when own policy is not enforced
Privacy Implications of Privacy Settings and Tagging in Facebook