Content-Based Access Control for Blogs and Social Networks

该项目将开发基于内容的访问控制（CBAC），这是一个内容共享网站的访问控制系统。该系统的开发涉及三个方面的研究工作。首先，本研究将发展和扩展自动内容分析技术，以分类内容共享网站上的条目并识别潜在的读者。其次，它将实现一个CBAC系统，用于创建和执行基于内容的访问控制策略。第三，它将根据对用户内容、行为和上下文的观察，开发自动调整这些策略的技术。本研究将在一个隐私/政策意识博客系统PLoG的背景下进行评估。社会网络站点、博客和其他内容共享站点的流行程度呈爆炸式增长，导致更多的个人信息和观点可以在比以往更少的访问控制下获得。但是，许多站点只提供最基本的访问控制机制：文档可以是完全私有的，也可以是完全公开的。即使是最好的存储库也只提供一般的角色分类，如私有的、仅限朋友的和全球可读的，这使得用户不可能将他或她生活的多个方面放入单个受控存储库中。不良的访问控制机制的后果已经得到了充分的证明。例如，一些博主失去了工作或成为跟踪的受害者。这个跨学科的项目将开发一个易于用户理解和管理的访问控制系统。为了支持该系统，它将开发新的和扩展的技术，用于文本和多媒体对象的自动分类、访问控制策略的编写和维护以及访问控制策略的自动适应。这些技术将使数百万为内容共享网站做出贡献的人能够更好地控制他们与他人共享的信息。

This project will develop Content-Based Access Control (CBAC), a system for access control on content sharing sites. The development of this system involves three research efforts. First, the research will develop and extend techniques for the automatic content analysis, to categorize entries on content-sharing sites and identify potential readers. Second, it will implement a CBAC system for creating and enforcing content-based access control policies. Third, it will develop techniques for adapting these policies automatically based on observation of users' content, behavior and context. This research will be evaluated in the context of PLoG, a Privacy/Policy aware blogging system. The popularity of social networking sites, blogging, and other content-sharing sites has exploded, resulting in more personal information and opinions being available with less access control than ever before. However, many sites provide only the most rudimentary of access control mechanisms: a document can be either completely private or completely public. Even the best provide only general role classifications such as private, friends-only, and world-readable, making it impossible for a user to place multiple facets of his or her life into a single, controlled repository. The consequences of poor access control mechanisms have been well-documented. For example, some bloggers have lost their jobs or become victims of stalking. This interdisciplinary project will develop an access control system that is easy for users to understand and administer. To support the system, it will develop new and extended techniques for automatic categorization of text and multimedia objects, access control policy authoring and maintenance, and automatic adaptation of access control policies. These techniques will enable the millions of people who contribute to content sharing sites to better control the information they share with others.