Sherlock Holmes' evil twin: On the impact of global inference for online privacy

Proceedings New Security Paradigms Workshop

Volumn , Issue , 2011, Pages 105-114

  Friedland, Gerald ^a   Maier, Gregor ^a   Sommer, Robin ^a   Weaver, Nicholas ^a  

^a INTERNATIONAL COMPUTER SCIENCE INSTITUTE   (United States)

Author keywords

anonymization; global inference; online privacy; security

Indexed keywords

ANONYMIZATION; BUSINESS MODELS; GLOBAL INFERENCE; INFERENCE ATTACKS; MULTIMEDIA CONTENT ANALYSIS; ONLINE PRIVACY; PERSONAL INFORMATION; SECURITY;

SECURITY OF DATA;

EID: 84855657856     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2073276.2073287     Document Type: Conference Paper

References (58)

1. Gnip. http://www.gnip.com.
2. AGGARWAL, C. On k-anonymity and the curse of dimensionality. In Proceedings of the International Conference on Very Large Data Bases (2005).
3. AGGRAWAL, G., BURSZTEIN, E., JACKSON, C., AND BONEH, D. An analysis of private browsing modes in modern browsers. In Proceedings of the USENIX Security Symposium (2010).
4. Amazon.com Mechanical Turk, https://www.mturk.com/mturk/welcome.
5. BALDUZZI, M., PLATZER, C., HOLZ, T., KIRDA, E., BALZAROTTI, D., AND KRUEGEL, C. Abusing social networks for automated user profiling. In RAID'2010, 13th International Symposium on Recent Advances in Intrusion Detection (09 2010).
6. BILGE, L., STRUFE, T., BALZAROTTI, D., AND KIRDA, E. All your contacts are belong to us: automated identity theft attacks on social networks. In Proceedings of the 18th International Conference on World Wide Web (WWW) (2009).
7. BISHOP, M., CUMMINS, J., PEISERT, S., SINGH, A., BHUMIRATANA, B., AGARWAL, D., FRINCKE, D., AND HOGARTH, M. Relationships and Data Sanitization: A Study in Scarlet. In Proc. Workshop on New Security Paradigms (2010).
8. BLUMBERG, A., AND ECKERSLEY, P. On locational privacy, and how to avoid losing it forever. Electronic Frontier Foundation. http://www.eff.org/wp/ locational-privacy.
9. CHOW, R., GOLLE, P., AND STADDON, J. Detecting privacy leaks using corpus-based association rules. In Proceeding of the 14th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (2008).
10. COHAN, P. Why executives risk their job to tip a hedge fund. http://meet-the-street.blogspot.com/2009/10/ expert-networks-what-every-iro- needs-to.html, 2009.
11. COLBERT, S. The Word - Control-Self-Delete, http://www.colbertnation.com/ the-colbert-report-videos/351570/ august-24-2010/the-word-control-self-delete.
12. CRAY INC. Cray XMT. http://www.cray.com/products/xmt/.
13. DINUR, I., AND NISSIM, K. Revealing information while preserving privacy. In ACM SIGACT-SIGMOD-SIGART Symposium on Principles of Database Systems (PODS) (2003).
14. DWORK, C. Differential privacy. In 33rd International Colloquium on Automata, Languages, and Programming (ICALP) (2006).
15. DWORK, C. Differential privacy: A survey of results. In Theory and Applications of Models of Computation, vol. 4978 of Lecture Notes in Computer Science. Springer Berlin / Heidelberg, 2008, pp. 1-19.
16. FRIEDLAND, G. Analytics for Experts. ACM SIGMM Reecords 1, 1 (April 2009).
17. FRIEDLAND, G., AND SOMMER, R. Cybercasing the Joint: On the Privacy Implications of Geo-Tagging. In Proc. USENIX Workshop on Hot Topics in Security (August 2010).
18. FRIEDLAND, G., VINYALS, O., AND DARRELL, T. Multimodal Location Estimation. In Proc. of ACM Multimedia (October 2010).
19. FRIEDLAND, G., VINYALS, O., HUANG, Y., AND MÜLLER, C. Prosodic and Other Long-Term Features for Speaker Diarization. Transactions on Audio, Speech, and Language Processing 17, 5 (2009), 985-993.
20. GRIFFITH, V., AND JAKOBSSON, M. Messin' with texas deriving mother's maiden names using public records. In Proceedings of the International Conference on Applied Cryptography and Network Security (ACNS) (2005).
21. H-SECURITY. Cree.py application knows where you've been. http://www.h-online.com/security/news/item/ Cree-py-application-knows-where-you- ve-been-1217981. html.
22. HOH, B., GRUTESER, M., HERRING, R., BAN, J., WORK, D., HERRERA, J.-C., BAYEN, A. M., ANNAVARAM, M., AND JACOBSON, Q. Virtual trip lines for distributed privacy-preserving traffic monitoring. In MobiSys '08: Proceeding of the 6th International Conference on Mobile Systems, Applications, and Services (2008).
23. IBM. Capabilities: Social network analytics for banking and finance. https: //www-950.ibm.com/blogs/gbs-business-analytics/ entry/capabilities- social-network-analytics-for-banking-finance1?lang=en-us.
24. IDENTITY THEFT 911. http://www.identitytheft911.com/.
25. JAGATIC, T., JOHNSON, N., JAKOBSSON, M., AND MENCZER, F. Social phishing. Communications of the ACM 50, 10 (2007).
26. JAKOBSSON, M., AND MYERS, S. Phishing and Countermeasures: Understanding the Increasing Problem of Electronic Identity Theft. Wiley-Interscience, 2006.
27. JOHNSON, C. Project Gaydar, Sep 2009.
28. KRISHNAMURTHY, B., MALANDRINO, D., AND WILLS, C. Measuring privacy loss and the impact of privacy protection in web browsing. In Proceedings of the 3rd Symposium on Usable Privacy and Security (2007).
29. KRISHNAMURTHY, B., AND WILLS, C. Generating a privacy footprint on the Internet. In Proceedings of the 6th ACM SIGCOMM Conference on Internet Measurement (IMC) (2006).
30. KRISHNAMURTHY, B., AND WILLS, C. Characterizing privacy in online social networks. In Proceedings of the 1st Workshop on Online Social Networks (WOSN) (2008).
31. MCCARTHY, C. N.J. Town posts DUI photos on Facebook, http: //news.cnet.com/8301-13577-3-20013632-36.html.
32. NARAYANAN, A., AND SHMATIKOV, V. Robust de-anonymization of large sparse datasets. In Proceedings of the IEEE Symposium on Security and Privacy (2008).
33. NARAYANAN, A., AND SHMATIKOV, V. De-anonymizing social networks. In Proceedings of the IEEE Symposium on Security and Privacy (2009).
34. NEW YORK TIMES. Critics Say Google Invades Privacy With New Service. Feb 13, 2010.
35. NEWSWEEK. A tragedy that won't fade away, Apr 2009. http://www.newsweek. com/2009/04/24/ a-tragedy-that-won-t-fade-away.html.
36. NIST. 2010 NIST Speaker Recognition Evaluation, http://www.itl.nist.gov/ iad/mig//tests/sre/2010/ index.html.
37. NIST. The 2007 NIST Language Recognition Evaluation Results. http://www.itl.nist.gov/iad/mig/tests/ lre/2007/lre07-eval-results-vFINAL/index. html, 2007.
38. PETAMEDIA. 2010 MediaEval Placing Task, http: //www.multimediaeval.org/ placing/placing.html.
39. PHILLIPS, P. J. Improving Face Recognition Technology. Computer 44, 3 (March 2011), 84-86.
40. PLATFORM FOR PRIVACY PREFERENCES (P3P) INITIATIVE. http://www.w3.org/P3P/ .
41. POPA, R. A., BALAKRISHNAN, H., AND BLUMBERG, A. VPriv: Protecting Privacy in Location-Based Vehicular Services. In Proceedings of the USENIX Security Symposium (2009).
42. REPUTATION DEFENDER. http://reputationdefender.com/.
43. SCHAURER, F., AND STöRGER, J. OSINT Report 3/2010 - The Evolution of Open Source Intelligence. Tech. rep., International Relations and Security Network, ETH Zurich, 2010.
44. SHANKAR, U., AND KARLOF, C. Doppelganger: Better browser privacy without the bother. In Proceedings of the ACM Conference on Computer and Communications Security (CCS) (2006).
45. SPIEGEL ONLINE. Setting Hurdles for Google and Others: Germans Like to Look, But Not to Be Looked At. http://www.spiegel.de/international/germany/0, 1518,712485,00.html, 2010.
46. STADDON, J., GOLLE, P., AND ZIMNY, B. Web-based inference detection. In Proceedings of 16th USENIX Security Symposium (2007).
47. SWEENEY, L. Weaving technology and policy together to maintain confidentiality. Journal of Law, Medicine, and Ethics 25, 2-3 (1997).
48. SWEENEY, L. k-anonymity: A model for protecting privacy. Journal of Uncertainty, Fuzziness and Knowledge-based Systems 10, 5 (2002).
49. TAIPALE, K. A. Data Mining and Domestic Security: Connecting the Dots to Make Sense of Data. SSRN eLibrary.
50. THE WALL STREET JOURNAL. The Web's New Gold Mine: Your Secrets. Jul 30, 2010.
51. Army regulation 530-1: Operations security (opsec), April 2007.
52. VENTUREBEAT.Gnip grabs $2M as it teams up with Twitter in new data selling deal. http://venturebeat.com/2010/ 11/18/gnip-funding-twitter-data.
53. WIKIPEDIA. Advanced Persistent Thread (APT). http://en.wikipedia.org/ wiki/Advanced- Persistent-Threat, 2011.
54. WONDRACEK, G., HOLZ, T., KIRDA, E., AND KRUEGEL, C. A practical attack to de-anonymize social network users. In Proceedings of the IEEE Symposium on Security and Privacy (2010).
55. WORLEY, B. Tips to Turn Off Geo-Tagging on Your Cell Phone, http://abcnews.go.com/GMA/video/ online-photos-give-privacy-11443667.
56. YUE, C., XIE, M., AND WANG, H. An automatic HTTP cookie management system. Computer Networks (2010).
57. ZHELEVA, E., AND GETOOR, L. To join or not to join: the illusion of privacy in social networks with mixed public and private user profiles. In Proceedings of the 18th International Conference on World Wide Web (2009), pp. 531-540.
58. ZHONG, G., GOLDBERG, I., AND HENGARTNER, U. Louis, lester and pierre: Three protocols for location privacy. In Proceedings of the Privacy Enhancing Technologies Symposium (2007).