TrustSplit: Usable confidentiality for social network messaging

HT'12 - Proceedings of 23rd ACM Conference on Hypertext and Social Media

Volumn , Issue , 2012, Pages 145-154

  Fahl, Sascha ^a   Harbach, Marian ^a   Muders, Thomas ^a   Smith, Matthew ^a  

^a LEIBNIZ UNIVERSITY HANNOVER   (Germany)

Author keywords

Confidentiality; Privacy; Social networks; Symmetric encryption; Usability

Indexed keywords

ADDITIONAL KNOWLEDGE; CONFIDENTIALITY; FACEBOOK; ONLINE ACTIVITIES; PRIVATE DATA; PRIVATE INFORMATION; SERVICE PARADIGM; SOCIAL NETWORKING SITES; SOCIAL NETWORKS; SYMMETRIC ENCRYPTION; USABILITY; USABILITY STUDIES;

DATA PRIVACY; HYPERTEXT SYSTEMS;

SOCIAL NETWORKING (ONLINE);

EID: 84864071462     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2309996.2310022     Document Type: Conference Paper

References (29)

1. A. Acquisti and R. Gross. Imagined Communities: Awareness, Information Sharing, and Privacy on the Facebook. In Proceedings of the 11th International Conference on Privacy Enhancing Technologies, pages 36-58. Springer, 2006.
2. J. Anderson, C. Diaz, J. Bonneau, and F. Stajano. Privacy-enabling Social Networking over Untrusted Networks. In Proceedings of the 2nd ACM Workshop on Online Social Networks, pages 1-6, 2009.
3. R. Baden, A. Bender, N. Spring, B. Bhattacharjee, and D. Starin. Persona: An Online Social Network With User-defined Privacy. In Proceedings of the ACM SIGCOMM 2009 Conference on Data Communication, pages 135-146, 2009.
4. F. Beato, M. Kohlweiss, and K. Wouters. Scramble! Your Social Network Data. In Proceedings of the 11th International Conference on Privacy Enhancing Technologies, pages 211-225. Springer, 2011.
5. D. Boyd. Facebook's Privacy Trainwreck: Exposure, Invasion, and Social Convergence. Convergence: The International Journal of Research into New Media Tec hn ol ogi e s, 14(1):13-20, 2008.
6. D. Boyd. Taken Out of Context: American Teen Sociality in Networked Publics. PhD thesis, University of California-Berkeley, School of Information, 2008.
7. S. Buchegger, D. Schiöberg, L.-H. Vu, and A. Datta. PeerSoN: P2P Social Networking: Early Experiences and Insights. In Proceedings of the Second ACM EuroSys Workshop on Social Network Systems, pages 46-52, 2009.
8. B. Burke. RESTful Java with Jax-RS. O'Reilly Media, Inc., 1st edition, 2009.
9. L. Cutillo, R. Molva, and T. Strufe. Safebook: A Privacy-preserving Online Social Network Leveraging on Real-life Trust. Communications Magazine, IEEE, 47(12):94-101, dec. 2009.
10. S. Egelman, J. Tsai, L. F. Cranor, and A. Acquisti. Timing is Everything?: The Effects of Timing and Placement of Online Privacy Indicators. In Proceedings of the 27th ACM CHI'09, pages 319-328. ACM, 2009.
11. A. Ermak. encipher.it. http://encipher.it, 2011.
12. L. Fang and K. LeFevre. Privacy Wizards for Social Networking Sites. In Proceedings of WWW'10, pages 351-360, 2010.
13. S. Garfinkel. Email-based Identification and Authentication: An Alternative to PKI? IEEE Security and Privacy, 1(6):20-26, Nov. 2003.
14. R. Gross and A. Acquisti. Information Revelation and Privacy in Online Social Networks. In Proceedings of the 2005 ACM Workshop on Privacy in the Electronic Society, pages 71-80, 2005. (Pubitemid 44447420)
15. S. Guha, K. Tang, and P. Francis. NOYB: Privacy in Online Social Networks. In Proceedings of the First Workshop on Online Social Networks, pages 49-54. ACM, 2008.
16. P. Gundecha, G. Barbier, and H. Liu. Exploiting Vulnerability to Secure User Privacy on a Social Networking Site. In Proceedings of the 17th ACM SIGKDD Conference, pages 511-519, 2011.
17. Hush Communications Canada Inc. Hushmail - A Secure Web-based Free Email Service. http://www.hushmail.com/, last access: 14.10.11, 1999.
18. M. M. Lucas and N. Borisov. FlyByNight: Mitigating the Privacy Risks of Social Networking. In Proceedings of the 7th ACM Workshop on Privacy in the Electronic Society, pages 1-8, 2008.
19. A. J. Menezes, S. A. Vanstone, and P. C. V. Oorschot. Handbook of Applied Cryptography. CRC Press, Inc., Boca Raton, FL, USA, 1st edition, 1996.
20. National Institute of Standards and Technology (NIST). Advanced Encryption Standard (AES) (FIPS PUB 197), October 2001.
21. Reputation.com Inc. uProtect.it. http://uprotect.it, 2011.
22. P. Rogaway and D. Wagner. Comments to NIST concerning AES Modes of Operations: CTR-Mode Encryption. National Institute of Standards and Technologies, 2000.
23. C. Shannon. Communication Theory of Secrecy Systems. Bell System Technical Journal, 28:656-715, October 1949.
24. R. Singel. Encrypted E-Mail Company Hushmail Spills to Feds. http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/, last access: 14.10.11, Nov 2007.
25. A. C. Squicciarini, M. Shehab, and F. Paci. Collective Privacy Management in Social Networks. In Proceedings of WWW'09, pages 521-530, 2009.
26. The Diaspora Project. http://diasporafoundation.org/ - last access: 27.10.11, 2011.
27. Z. Tufekci. Can You See Me Now? Audience and Disclosure Regulation in Online Social Network Sites. Bulletin of Science, Technology & Society, 28(1):20-36, 2008.
28. T. Whalen and K. M. Inkpen. Gathering Evidence: Use of Visual Security Cues in Web Browsers. In Proceedings of Graphics Interface 2005, pages 137-144. Canadian Human-Computer Communications Society, 2005. (Pubitemid 43211959)
29. M. Wu, R. C. Miller, and S. L. Garfinkel. Do Security Toolbars Actually Prevent Phishing Attacks? In Proceedings of the 24th ACM CHI '06, pages 601-610. ACM, 2006. (Pubitemid 44032148)