Keeping information safe from social networking apps

WOSN'12 - Proceedings of the ACM Workshop on Online Social Networks

Volumn , Issue , 2012, Pages 49-54

  Viswanath, Bimal ^a   Kiciman, Emre ^b   Saroiu, Stefan ^b  

^a MAX PLANCK INSTITUTE FOR SOFTWARE SYSTEMS   (Germany)

^b MICROSOFT RESEARCH   (United States)

Author keywords

data privacy; differential privacy; facebook; information flow control; online social networks; social apps

Indexed keywords

DIFFERENTIAL PRIVACIES; FACEBOOK; INFORMATION FLOW CONTROL; ONLINE SOCIAL NETWORKS; SOCIAL APPS;

AGGREGATES; DATA HANDLING; DATA PRIVACY;

SOCIAL NETWORKING (ONLINE);

EID: 84866604942     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2342549.2342561     Document Type: Conference Paper

References (29)

1. R. Chugh, J. A. Meister, R. Jhala, and S. Lerner. Staged Information Flow for Javascript. In Proceedings of the Programming Languages Design and Implementation (PLDI), 2009.
2. B. Dodson, I. Vo, T. Purtell, A. Cannon, and M. Lam. Musubi: Disintermediated Interactive Social Feeds for Mobile Devices. In Proceedings of the International Conference on World Wide Web (WWW), 2012.
3. J. R. Douceur, J. Elson, J. Howell, and J. R. Lorch. Leveraging Legacy Code to Deploy Desktop Applications on the Web. In Proceedings of the Usenix Symposium on Operating Systems Design and Implementation (OSDI), 2008.
4. C. Dwork. Differential Privacy. In Proceedings of the International Colloquium on Automata, Language and Programming (ICALP), 2006.
5. C. Dwork, F. Mcsherry, K. Nissim, and A. Smith. Calibrating Noise to Sensitivity in Private Data Analysis. In Proceedings of the Theory of Cryptography Conference (TCC), 2006.
6. Facebook leaks access tokens to advertisers. http://tinyurl.com/3z7g3g7.
7. Facebook privacy hole due to buggy app. http://news.cnet.com/8301-10784- 3-9977762-7.html.
8. Fine Project. http://research.microsoft.com/en-us/projects/fine/.
9. Google Caja. http://code.google.com/p/google-caja/.
10. M. Krohn, A. Yip, M. Brodsky, N. Cliffer, M. F. Kaashoek, E. Kohler, and R. Morris. Information Flow Control for Standard OS Abstractions. In Proceedings of the ACM SIGOPS symposium on Operating systems principles (SOSP), 2007.
11. D. Liu, A. Shakimov, Ramón Cáceres, A. Varshavsky, and L. P. Cox. Confidant: Protecting OSN Data without Locking it Up. In Proceedings of the International Middleware Conference (Middleware), 2011.
12. F. McSherry. Privacy Integrated Queries: An Extensible Platform for Privacy-preserving Data Analysis. In Proceedings of the ACM SIGMOD International Conference on Management of Data (SIGMOD), 2009.
13. F. McSherry and R. Mahajan. Differentially-private Network Trace Analysis. In Proceedings of the ACM Special Interest Group on Data Communication (SIGCOMM), 2010.
14. F. McSherry and I. Mironov. Differentially Private Recommender Systems: Building Privacy into the Netflix Prize Contenders. In Proceedings of the ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD), 2009.
15. F. McSherry and K. Talwar. Mechanism Design via Differential Privacy. In Proceedings of the IEEE Symposium on Foundations of Computer Science (FOCS), 2007.
16. Microsoft Web Sandbox. http://www.websandbox.org/Default.aspx.
17. A. Mislove, M. Marcon, K. P. Gummadi, P. Druschel, and B. Bhattacharjee. Measurement and Analysis of Online Social Networks. In Proceedings of the ACM SIGCOMM Conference on Internet Measurement (IMC), 2007.
18. .NET AppDomain. http://msdn.microsoft.com/en-us/library/system. appdomain(v=vs.71).aspx.
19. D. E. Porter, S. Boyd-Wickizer, J. Howell, R. Olinsky, and G. C. Hunt. Rethinking the Library OS from the Top Down. In Proceedings of the International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), 2011.
20. I. Roy, S. T. V. Setty, A. Kilzer, V. Shmatikov, and E. Witchel. Airavat: Security and Privacy for MapReduce. In Proceedings of the USENIX Conference on Networked Systems Design and Implementation(NSDI), 2010.
21. RUBINET Data Sets. http://www.ece.ucdavis.edu/rubinet/data.html.
22. K. Singh, S. Bhola, and W. Lee. xBook: Redesigning Privacy Control in Social Networking Platforms. In Proceedings of the Conference on USENIX Security Symposium (USENIX Security), 2009.
23. N. Swamy, J. Chen, and R. Chugh. Enforcing Stateful Authorization and Information Flow Policies in Fine. In Proceedings of the European Symposium on Programming (ESOP), 2010.
24. Third-party apps sell private data. http://tinyurl.com/27fnslp.
25. A. Whitaker, M. Shaw, and S. D. Gribble. Scale and Performance in the Denali Isolation Kernel. In Proceedings of the Usenix Symposium on Operating Systems Design and Implementation (OSDI), 2002.
26. Windows Azure Storage. http://www.microsoft.com/windowsazure/storage/.
27. N. Zeldovich, S. Boyd-wickizer, E. Kohler, and D. Mazieres. Making Information Flow Explicit in HiStar. In Proceedings of the Usenix Symposium on Operating Systems Design and Implementation (OSDI), 2006.
28. L. Zheng and A. C. Myers. Dynamic security labels and static information flow control. International Journal of Information Security, 2007.
29. Zynga Hit With Lawsuit Over Facebook Privacy Breach. http://tinyurl.com/ 3qjcbll.