PoX: Protecting users from malicious Facebook applications

2011 IEEE International Conference on Pervasive Computing and Communications Workshops, PERCOM Workshops 2011

Volumn , Issue , 2011, Pages 288-294

  Egele, Manuel ^a,b   Moser, Andreas ^a,b   Kruegel, Christopher ^b   Kirda, Engin ^c  

^a VIENNA UNIVERSITY OF TECHNOLOGY   (Austria)

^b UNIVERSITY OF CALIFORNIA   (United States)

^c NORTHEASTERN UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BEST POSITION; FACEBOOK; ONLINE SOCIAL NETWORKS; PRIVATE DATA; PROFILE DATA; SOCIAL NETWORKS; THIRD PARTIES; USER DATA;

ACCESS CONTROL; SECURITY SYSTEMS; SOCIAL SCIENCES COMPUTING; UBIQUITOUS COMPUTING; USER INTERFACES;

SOCIAL NETWORKING (ONLINE);

EID: 79958077014     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PERCOMW.2011.5766885     Document Type: Conference Paper

References (17)

1. "Facebook statistics," http://www.facebook.com/press/info.php? statistics.
2. 'Opensocial - the web is better when it's social," http://code.google.com/apis/opensocial/.
3. "Facebook platform launches with 65 developer partners and over 85 applications for facebook," http://www.facebook.com/press/releases.php?p= 1319, 2007.
4. S. Kelly, "Identity 'at risk' on facebook," http://news.bbc.co.uk/2/hi/programmes/click-online/7375772.stm, 2008.
5. E. Mills, "Facebook suspends app that permitted peephole," http://news.cnet.com/8301-10784\-3-9977762-7.html, 2008.
6. E. Steel and G. A. Fowler, "Facebook in online privacy breach; applications transmitting identifying information," http://online.wsj.com/ article/SB10001424052702304772804575558484075236968.html, 2010.
7. E. J. Markey and J. Barton, "Letter to mr. zuckerberg," http://markey.house.gov/docs/letter-facebook-post-wsj-10-18-10.pdf, 2010.
8. "Facebook privacy change angers campaigners," http://www.guardian.co.uk/technology/2009/dec/10/facebook-privacy.
9. "Facebook's zuckerberg: Privacy no longer a "social norm"," http://www.pamorama.net/2010/01/ll/facebooks-zuckerberg- privacy-no-longer-a-social-norm/, 2010.
10. L. Bilge, T. Strufe, D. Balzarotti, and E. Kirda, "All your contacts are belong to us: automated identity theft attacks on social networks," in WWW '09: Proceedings of the 18th international conference on World wide web. New York, NY, USA: ACM, 2009, pp. 551-560.
11. T. N. Jagatic, N. A. Johnson, M. Jakobsson, and F. Menczer, "Social phishing," Commun. ACM, vol. 50, no. 10, pp. 94-100, 2007. (Pubitemid 47505005)
12. A. Felt and D. Evans, "Privacy protection for social networking platforms," in Web 2.0 Security and Privacy, (W2SP 2008), 2008.
13. K. Singh, S. Bhola, and W. Lee, "xbook: Redesigning privacy control in social networking platforms," in Proceedings of the 18th Usenix Security Symposium, August 2009. [Online]. Available: http://www.cc.gatech.edu/grads/k/ ksingh/publication/sec09-xbook.pdf
14. "Adsafe - making javascript safe for advertising." http://www.adsafe.org/.
15. M. Shehab, A. C. Squicciarini, and G. J. Ahn, "Beyond user-to-user access control for online social networks," in ICICS '08: Proceedings of the 10th International Conference on Information and Communications Security. Berlin, Heidelberg: Springer-Verlag, 2008, pp. 174-189. [Online]. Available: http://dx.doi.org/10.1007/978-3-540-88625-9-12
16. M. M. Lucas and N. Borisov, "Flybynight: mitigating the privacy risks of social networking," in WPES '08: Proceedings of the 7th ACM workshop on Privacy in the electronic society. New York, NY, USA: ACM, 2008, pp. 1-8.
17. W. Luo, Q. Xie, and U. Hengartner, "Facecloak: An architecture for user privacy on social networking sites," in Proceedings of 2009 IEEE International Conference on Privacy, Security, Risk and Trust (PASSAT-09), August 2009.