Security and Privacy Protection for Social Computing

社交计算的安全与隐私保护

• 批准号: RGPIN-2014-06611
• 负责人: Fong, Philip
• 金额: $ 2.84万
• 依托单位: University of Calgary
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2016
• 资助国家: 加拿大
• 起止时间: 2016-01-01 至 2017-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=612327
• 关键词: Security; Privacy; Protection; Social; Computing

We increasingly store personal information on various digital platforms. Of particular concern are the emergence of social computing platforms (e.g., Facebook, Foursquare) as custodians of information about our private and social life, as well as the shifting culture of the next generation to willingly disclose the minute details of their personal lives via such platforms. These platforms present unique security and privacy challenges that are not addressed by classical protection technologies. The study of Access Control involves the articulation and analysis of protection models for regulating access to information, and the design of mechanisms and technologies for realizing these models. In this proposed research program, I will explore access control innovations that are motivated by the novel security and privacy challenges of social computing. This proposed research program has three objectives. First, it aims at devising innovative protection technologies for addressing the unique security and privacy challenges in social computing platforms. Examples include technologies for the prevention of inference attacks by Facebook applications, protection technologies for controlling access to resources that affect the privacy of multiple parties (e.g., photo tagging), and assessment of privacy risks in geo-social network systems (e.g., Foursquare). Second, this research program aims at formulating mathematical models for improving our understanding of emerging social computing paradigms. Examples include building mathematical theories for modelling social contracts in online communities (e.g., Wikipedia), as well as formulation of mathematical models for the authorization mechanisms of geo-social network systems. A third objective of this research program is to devise supporting technologies that would make it easier for users to interact with advanced access control models for social computing. An example is to design visual formalisms so that users may draw diagrams to specify social contracts for an online community.

我们越来越多地将个人信息存储在各种数字平台上。特别关注的是社交计算平台的出现（例如，Facebook，Foursquare）作为我们私人和社交生活信息的保管人，以及下一代愿意通过这些平台披露个人生活细节的不断变化的文化。这些平台带来了传统保护技术无法解决的独特安全和隐私挑战。 访问控制的研究包括阐明和分析用于规范信息访问的保护模型，以及设计实现这些模型的机制和技术。在这个拟议的研究计划中，我将探索访问控制创新的动机是社会计算的新的安全和隐私的挑战。 这项研究计划有三个目标。首先，它旨在设计创新的保护技术，以解决社交计算平台中独特的安全和隐私挑战。示例包括用于防止Facebook应用程序的推理攻击的技术、用于控制对影响多方隐私的资源的访问的保护技术（例如，照片标记），以及评估地理社交网络系统中的隐私风险（例如，Foursquare）。其次，本研究计划旨在制定数学模型，以提高我们对新兴社会计算范式的理解。例子包括建立数学理论来模拟在线社区中的社会契约（例如，Wikipedia），以及地理社交网络系统授权机制的数学模型的制定。该研究计划的第三个目标是设计支持技术，使用户更容易与社会计算的高级访问控制模型进行交互。一个例子是设计视觉形式主义，以便用户可以绘制图表来指定在线社区的社会契约。