Content-Based Access Control for Blogs and Social Networks

该项目将开发基于内容的访问控制(CBAC)，这是一个在内容共享网站上进行访问控制的系统。该系统的开发涉及三个方面的研究工作。首先，这项研究将开发和扩展自动内容分析技术，对内容共享网站上的条目进行分类，并确定潜在读者。其次，它将实施CBAC系统，以创建和执行基于内容的访问控制策略。第三，它将开发技术，根据对用户内容、行为和背景的观察，自动调整这些策略。这项研究将在Plog的背景下进行评估，Plog是一个隐私/政策感知博客系统。社交网站、博客和其他内容共享网站的受欢迎程度呈爆炸式增长，导致比以往任何时候都更少的访问控制可以获得更多的个人信息和意见。然而，许多站点只提供最基本的访问控制机制：文档可以是完全私有的，也可以是完全公开的。即使是最好的，也只提供一般的角色分类，比如私有的、仅限朋友的和可读的，这使得用户不可能将他或她生活的多个方面放到一个单一的、受控制的存储库中。不良的访问控制机制的后果已经有了很好的记录。例如，一些博客作者失去了工作，或者成为了跟踪的受害者。这个跨学科的项目将开发一个用户易于理解和管理的门禁系统。为支持该系统，它将开发新的扩展技术，用于文本和多媒体对象的自动分类、访问控制策略的编写和维护以及访问控制策略的自动调整。这些技术将使数百万向内容共享网站投稿的人能够更好地控制他们与他人共享的信息。

This project will develop Content-Based Access Control (CBAC), a system for access control on content sharing sites. The development of this system involves three research efforts. First, the research will develop and extend techniques for the automatic content analysis, to categorize entries on content-sharing sites and identify potential readers. Second, it will implement a CBAC system for creating and enforcing content-based access control policies. Third, it will develop techniques for adapting these policies automatically based on observation of users' content, behavior and context. This research will be evaluated in the context of PLoG, a Privacy/Policy aware blogging system. The popularity of social networking sites, blogging, and other content-sharing sites has exploded, resulting in more personal information and opinions being available with less access control than ever before. However, many sites provide only the most rudimentary of access control mechanisms: a document can be either completely private or completely public. Even the best provide only general role classifications such as private, friends-only, and world-readable, making it impossible for a user to place multiple facets of his or her life into a single, controlled repository. The consequences of poor access control mechanisms have been well-documented. For example, some bloggers have lost their jobs or become victims of stalking. This interdisciplinary project will develop an access control system that is easy for users to understand and administer. To support the system, it will develop new and extended techniques for automatic categorization of text and multimedia objects, access control policy authoring and maintenance, and automatic adaptation of access control policies. These techniques will enable the millions of people who contribute to content sharing sites to better control the information they share with others.