Enforcing User Privacy in Web Applications using Erlang
Enforcing User Privacy in Web Applications using Erlang
复制标题
DOI：
--
复制
发表时间：
2010-05
期刊：
影响因子：
--
通讯作者：
P. Pietzuch;I. Papagiannis;Matteo Migliavacca;D. Eyers;B. Shand;J. Bacon
中科院分区：
文献类型：
--
作者：
P. Pietzuch;I. Papagiannis;Matteo Migliavacca;D. Eyers;B. Shand;J. Bacon
网络上的社交网络应用处理大量同时活跃的用户的个人数据。这些应用程序必须符合复杂的隐私要求，同时实现可扩展性和高性能。通过这些应用程序对数据的流动施加约束以实施隐私策略是具有挑战性的，因为各个组件处理属于许多不同用户的数据。我们介绍了一种实用的方法，统一执行隐私要求，在这样的应用程序中使用的演员为基础的Erlang编程语言。为了隔离用户的个人数据，我们利用Erlang的廉价进程模型，并使用Erlang的消息传递机制来添加策略检查。我们说明了这种方法，通过描述一个隐私保护的消息调度器在微博服务的体系结构。我们对原型实现的性能评估表明，这种方法可以以较低的性能开销执行细粒度的隐私保证。
Social networking applications on the web handle the personal data of a large number of concurrently active users. These applications must comply with complex privacy requirements, while achieving scalability and high performance. Applying constraints to the flow of data through such applications to enforce privacy policy is challenging because individual components process data belonging to many different users. We introduce a practical approach for uniformly enforcing privacy requirements in such applications using the actor-based Erlang programming language. To isolate the personal data of users, we exploit Erlang’s inexpensive process model and use Erlang’s message passing mechanism to add policy checks. We illustrate this approach by describing the architecture of a privacy-preserving message dispatcher in a micro-blogging service. Our performance evaluation of a prototype implementation shows that this approach can enforce fine-grained privacy guarantees with a low performance overhead.