Relationship-based access control for online social networks: Beyond user-to-user relationships

Proceedings - 2012 ASE/IEEE International Conference on Privacy, Security, Risk and Trust and 2012 ASE/IEEE International Conference on Social Computing, SocialCom/PASSAT 2012

Volumn , Issue , 2012, Pages 646-655

  Cheng, Yuan ^a   Park, Jaehong ^a   Sandhu, Ravi ^a  

^a UNIVERSITY OF TEXAS AT SAN ANTONIO   (United States)

Author keywords

Access Control; Security; Social Networks

Indexed keywords

ACCESS CONTROL MODELS; AUTHORIZATION POLICY; CONFLICT RESOLUTION; EXPRESSIVE POWER; HOP COUNT; ON-LINE SOCIAL NETWORKS; ONLINE SOCIAL NETWORKS (OSNS); POLICY SPECIFICATION LANGUAGES; RESOURCE OWNERS; SECURITY; SOCIAL GRAPHS; SOCIAL NETWORKS; USER ACTIVITY;

SOCIAL NETWORKING (ONLINE); SPECIFICATION LANGUAGES;

ACCESS CONTROL;

EID: 84873637026     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SocialCom-PASSAT.2012.57     Document Type: Conference Paper

References (29)

1. L. Backstrom, P. Boldi, M. Rosa, J. Ugander, and S. Vigna. Four degrees of separation. CoRR, abs/1111.4570, 2011
2. S. Benferhat, R. El Baida, and F. Cuppens. A stratification-based approach for handling conflicts in access control. In Proceedings of the eighth ACM symposium on Access control models and technologies, SACMAT '03, pages 189-195, New York, NY, USA, 2003. ACM
3. E. Bertino, S. Jajodia, and P. Samarati. Supporting multiple access control policies in database systems. ACM Transactions on Database Systems, 26:2001, 1996
4. E. Bertino, S. Jajodia, and P. Samarati. A flexible authorization mechanism for relational data management systems. ACM Trans. Inf. Syst., 17(2):101-140, Apr. 1999
5. E. Bertino, P. Samarati, and S. Jajodia. Authorizations in relational database management systems. In Proceedings of the 1st ACM conference on Computer and communications security, CCS '93, pages 130-139, New York, NY, USA, 1993. ACM
6. B. Carminati, E. Ferrari, R. Heatherly, M. Kantarcioglu, and B. Thuraisingham. A semantic web based framework for social network access control. In Proceedings of the 14th ACM symposium on Access control models and technologies, SACMAT '09, pages 177-186, New York, NY, USA, 2009. ACM
7. B. Carminati, E. Ferrari, R. Heatherly, M. Kantarcioglu, and B. Thuraisingham. Semantic web-based social network access control. Computers and Security, 30(2C3):108-115, 2011. Special Issue on Access Control Methods and Technologies
8. B. Carminati, E. Ferrari, and A. Perego. Rule-based access control for social networks. In R. Meersman, Z. Tari, and P. Herrero, editors, On the Move to Meaningful Internet Systems 2006: OTM 2006 Workshops, volume 4278 of Lecture Notes in Computer Science, pages 1734-1744. Springer Berlin /Heidelberg, 2006
9. B. Carminati, E. Ferrari, and A. Perego. A decentralized security framework for web-based social networks. International Journal of Information Security and Privacy, 2(4):22-53, 2008
10. B. Carminati, E. Ferrari, and A. Perego. Enforcing access control in web-based social networks. ACM Trans. Inf. Syst. Secur., 13(1):1-38, 2009
11. Y. Cheng, J. Park, and R. Sandhu. A user-to-user relationship-based access control model for online social networks. In Proceedings of the 26th IFIP Annual WG 11.3 Conference on Data and Application Security and Privacy (DBSec '12), 2012
12. F. Cuppens, N. Cuppens-Boulahia, and M. B. Ghorbel. High level conflict management strategies in advanced access control models. Electronic Notes in Theoretical Computer Science, 186(0):3-26, 2007. Proceedings of the First Workshop in Information and Computer Security (ICS 2006)
13. D. E. Denning, T. F. Lunt, R. R. Schell, W. R. Shockley, and M. Heckman. The seaview security model. In Proceedings of the 1988 IEEE conference on Security and privacy, SP'88, pages 218-233, Washington, DC, USA, 1988. IEEE Computer Society
14. P. Fong, M. Anwar, and Z. Zhao. A privacy preservation model for Facebook-style social network systems. In ESORICS 2009: Proceedings of 14th European Symposium on Research in Computer Security, Saint-Malo, France, September 21-23, 2009, page 303. Springer, 2009
15. P. W. Fong. Relationship-based access control: protection model and policy language. In Proceedings of the first ACM conference on Data and application security and privacy, CODASPY '11, pages 191-202, New York, NY, USA, 2011. ACM
16. P. W. Fong and I. Siahaan. Relationship-based access control policies and their policy languages. In Proceedings of the 16th ACM symposium on Access control models and technologies, SACMAT '11, pages 51-60, New York, NY, USA, 2011. ACM
17. C. E. Gates. Access control requirements for web 2.0 security and privacy. In Proc. of Workshop on Web 2.0 Security and Privacy (W2SP 2007), 2007
18. H. Hu and G.-J. Ahn. Multiparty authorization framework for data sharing in online social networks. In Proceedings of the 25th annual IFIP WG 11.3 conference on Data and applications security and privacy, DBSec'11, pages 29-43, Berlin, Heidelberg, 2011. Springer-Verlag
19. S. Jajodia, P. Samarati, and V. S. Subrahmanian. A logical language for expressing authorizations. In Proceedings of the 1997 IEEE Symposium on Security and Privacy, pages 31-42, 1997
20. S. Jajodia, P. Samarati, V. S. Subrahmanian, and E. Bertino. A unified framework for enforcing multiple access control policies. In Proceedings of the 1997 ACM SIGMOD international conference on Management of data, SIGMOD '97, pages 474-485, New York, NY, USA, 1997. ACM
21. S. Kruk, S. Grzonkowski, A. Gzella, T. Woroniecki, and H. Choi. DFOAF: Distributed identity management with access rights delegation. Lecture Notes in Computer Science, 4185:140, 2006
22. A. Masoumzadeh and J. Joshi. Osnac: An ontology-based access control model for social networking systems. In IEEE Social Computing (SocialCom), 2010
23. S. Milgram. The small world problem. Psychology Today, 2(1):60-67, 1967
24. J. Park, R. Sandhu, and Y. Cheng. Acon: Activity-centric access control for social computing. In Proceedings 5th International Conference on Availability, Reliability and Security (ARES), 2011
25. J. Park, R. Sandhu, and Y. Cheng. A user-activity-centric framework for access control in online social networks. Internet Computing, IEEE, 15(5):62-65, sept.-oct. 2011
26. F. Rabitti, E. Bertino, W. Kim, and D. Woelk. A model of authorization for next-generation database systems. ACM Trans. Database Syst., 16(1):88-131, Mar. 1991
27. H. Shen and P. Dewan. Access control for collaborative environments. In Proceedings of the 1992 ACM conference on Computer-supported cooperative work, CSCW '92, pages 51-58, New York, NY, USA, 1992. ACM
28. A. C. Squicciarini, M. Shehab, and F. Paci. Collective privacy management in social networks. In Proceedings of the 18th international conference on World wide web, WWW '09, pages 521-530, New York, NY, USA, 2009. ACM
29. J. Travers and S. Milgram. An experimental study of the small world problem. Sociometry, 32(4):pp. 425-443, 1969.