신뢰도와 위험도로부터 합성된 지표에 기반을 둔 온라인 소셜 네트워크를 위한 접근 제어 방법
An Access Control Method Based on a Synthesized Metric from Trust and Risk Factors for Online Social Networks
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
‘페이스북’이나 ‘마이스페이스’같은 소셜 네트워크는 사람들끼리 관심사를 공유하거나 인간관계를 유지·확장할 수 있는 유용한 도구로 인식되고 있다. 그러나 한편으로 소셜 네트워크를 통해 개인정보가 유출될 위험이 있으므로 이를 해결할 수 있는 방안이 필요하다. 기존 소셜 네트워크 사이트들이 접근 제어 방식을 통해 사용자 스스로 자신의 정보를 보호토록 하고 있으나 접근을 허용한 사람을 통해 제삼자로의 정보 유출이 가능하다는 점에서 효과적인 해결책이 되지 못한다. 온라인 소셜 네트워크의 특성 상 자신이 잘 알지 못하는 사람에게 정보 접근을 허용하는 경우가 자주 발생하는 데 여기에는 정보 유출의 가능성이 내포되어 있다. 이러한 문제에 대한 해결책으로 타인에 대한 신뢰도에 기반을 둔 접근제어 방법이 사용될 수 있으나 이러한 방식 또한 정보 유출의 객관적 위험성을 반영하지 못한다는 한계를 가진다. 이에 본 논문은 이러한 문제에 대한 해결책으로 신뢰도와 정보 유출 위험도를 합성한 지표를 기반으로 접근 제어를 수행하는 방법을 제안하였으며, 다양한 실험을 통해 정보 유출 위험도가 온라인 소셜 네트워크에서의 접근 제어에서 중요한 역할을 할 수 있음을 보였다.
Abstract
Social Networks such as ‘Facebook’ and ‘Myspace’ are regarded as useful tools for people to share interests and maintain or expand relationships with other people. However, they pose the risk that personal information can be exposed to other people without explicit permission from the information owner. Therefore, we need a solution for this problem. Although existing social network sites allow users to specify the exposing range or users who can access their personal information, this cannot be a practical solution because the information can still be revealed to third parties through the permitted users albeit unintentionally. Usually, people allow the access of unknown person to personal data in online social networks and this implies the possibility of information leakage. We could use an access control method based on trust value, but this has the limitation that it cannot reflect the quantitative risk of information leakage. As a solution to this problem, this paper proposes an access control method based on a synthesized metric from trust and risk factors. Our various experiments show that the risk of information leakage can play an important role in the access control of online social networks.
참고문헌 (24)
- E. Adar, "Managing uncertainty in social networks", IEEE Data Engineering Bulletin, 30(2), pp.15~22 (2007)
- Stefan Weiss, "Online Social Networks and the Need for New Privacy Research in Information and Communication Technology", Third International Summer School organized by IFIP WG (2007)
- Ralph Gross, "Information revelation and privacy in online social networks", Proceedings of the 2005 ACM workshop on Privacy in the electronic society (2005)
- Jianming He, "Inferring Privacy Information from Social Networks", Lecture Notes in Computer Science, 3975, pp.154~165 (2006)
- Wanhong Xu, "Inferring privacy information via social relations", IEEE 24th International Conference on Data Engineering Workshop, pp.525~530 (2008)
- David Rosenblum, "What Anyone Can Know: The Privacy Risks of Social Networking Sites", IEEE Security and Privacy, 5(3), pp.40~49 (2007)
- B. Carminati, "Rule-based Access Control for Social Networks", OTM Workshops, 통권 : 4278, pp.1734~1744 (2006), LNCS
- Sebastian Ryszard Kruk, "D- FOAF: Distributed Identity Management with Access Rights Delegation", LNCS, 4186, pp.140~154 (2006)
- A. Sabelfeld, "Language-Based Information -Flow Security", IEEE Journal on Selected Areas in Communications, 21, pp.5~19 (2003)
- Carrie Gates, "Access Control Requirements for Web 2.0 Security and Privacy", W2SP 2007 (Web 2.0 Security & Privacy 2007), ~ (2007)
- Michael Hart, "More Content-Less Control: Access Control in the Web 2.0", W2SP 2007 (Web 2.0 Security & Privacy 2007), ~ (2007)
- Amin Tootoonchian, "Lockr: Social Access Control for Web 2.0", First ACM SIGCOMM Workshop on Online Social Networks (WOSN) (2008)
- A. Josang, "A Survey of Trust and Reputation Systems for Online Service Provision", Decision Support System, ~ (2006)
- J. Golbeck, "Accuracy of Metrics for Inferring Trust and Reputation in Semantic Web-based Social Networks", Proceedings of the EKAW 2004 (2004)
- D. Gambetta, "Can we trust trust? in Trust: Making and Breaking Cooperative Relations", 213~237 (2000)
- Trust among strangers in internet transactions: Empirical analysis of eBay's reputation system, "P. Resnick", University of Michigan, ~ (2001)
- The value of reputation on eBay: a controlled experiment, "P. Resnick", ~ (2002)
- Amy N. Langville, "Google's PageRank and Beyond: The Science of Search Engine Rankings" (2006), Princeton University Press
- Fuzzy Multi-Level Security: An Experiment on Quantified Risk-Adaptive Access Control, "P. C. Cheng", IBM, ~, pp.RC24190 (2007)
- C. Ziegler, "Propagation Models for Trust and Distrust in Social Networks", Information Systems Frontiers, 7(4), pp.337~358 (2005)
- L. Mui, "A Computational Model of Trust and Reputation", Proceedings of the 35th Hawaii International Conferences on System Sciences, pp.188~196 (2002)
- K. K. Bharadwaj, "Fuzzy Computational Models for Trust and Reputation Systems", Electronic Commerce Research and Applications, 8(1), pp.37~47 (2009)
- The Pagerank Citation ranking: Bringing Order to the Web, "L. Page", Stanford Digital Library, ~ (1998)
- J. Golbeck, "Computing and Applying Trust in Web-Based Social Networks", 박사, pp.2005