Need for Symmetry: Addressing Privacy Risks in Online Social Networks
Need for Symmetry: Addressing Privacy Risks in Online Social Networks
复制标题
对称性的需要：解决在线社交网络中的隐私风险
DOI：
--
复制
发表时间：
2011
期刊：
影响因子：
--
通讯作者：
Zhong Chen
中科院分区：
文献类型：
--
作者：
Cong Tang;Yonggang Wang;H. Xiong;Tao Yang;Jian;Qingni Shen;Zhong Chen
在线社交网络(OSN)用户的隐私属性可以从其他信息(通常来自用户的朋友和群信息)中推断出来。为了解决这个问题，社交网站允许用户隐藏他们的朋友列表和群组列表，这样普通公众就看不到它们了。然而，如果一个用户没有公开他的朋友列表，但他的朋友有公共的朋友列表，我们可以在那里找到他，我们可以进行反向查找来扩展该用户的朋友列表。此外，许多社交网络允许非群组成员列出公共群组的成员(例如，Face book)。这些都是对OSN用户隐私的强烈侵犯，可以认为是OSN中设置配置不对称造成的隐私风险。在本文中，我们提出了由于缺乏对称配置而带来的隐私风险，这种配置存在于大多数OSN中。为了更清楚地说明我们的想法，我们提出了一种推理攻击，并证明了它可以用来推断用户的私人信息，即使用户已经将他们的好友名单设置为私人的。我们从理论上分析了提出的隐私问题的风险，并基于真实世界的OSN数据进行了实验评估。证明了仅禁用好友列表和群组列表来保证隐私是不够的，并提出了缓解这些隐私问题的方法。
Private attributes of Online Social Network (OSN) users can be inferred from other information (which is usually from users' friends and group information). To address this, social networking sites allow users to hide their friend lists and group lists, so that general public cannot see them. However, if a user doesn't make his friend list public, but his friends have public friend list where we can find him, we can do reverse lookup to extend the friend lists of the user. Furthermore, many social networks allow non-group members to list the members of public groups (e.g., Face book). These are strong violations of OSN users' privacy, and can be considered as privacy risks caused by the asymmetric configuration of settings in OSNs. In this paper we present the privacy risks due to the lack of symmetric configurations, which exist in most of the OSNs. To make our idea more clear, we propose a inference attack and show that it can be used to infer users' private information, even users already made their friend list private. We theoretically analyze the risk of proposed privacy issues, and evaluate the risk using experiments based on real-world OSN data. We show that it is not sufficient to only disable friend list and group list to guarantee privacy, and propose methods to mitigate these privacy issues.