소셜 네트워크 서비스를 위한 선별적 암호화 기능을 제공하는 관계 기반 동적 접근제어 모델
Relationship-based Dynamic Access Control Model with Choosable Encryption for Social Network Service
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
소셜 네트워크 서비스는 온라인상에서 정보의 공개성과 관계의 확장성을 기반으로 사용자의 개성을 표현하고 인적네트워크를 강화시켜 주는 서비스이다. 하지만 이러한 특성은 사용자의 개인정보를 확산시키고 신뢰할 수 없는 정보에 접근하도록 하는 부작용을 초래한다. 따라서 사용자의 프라이버시를 보호하기 위한 다양한 접근제어 기법이 제안되었다. 하지만 데이터 암호화 접근제어 기법은 사용자와 직접적인 관계를 맺은 대상에 대한 접근제어만 지원하며 데이터 비 암호화 접근제어 기법은 서비스 제공자가 모든 정보를 열람할 수 있게 한다. 또한 두 접근제어 기법 모두 사용자 신뢰도에 대한 동적인 변화를 고려하지 않아 정적 접근제어만 제공하는 문제점이 있다. 이에 본 논문에서는 사용자가 선별한 민감한 데이터에 대한 암호화를 제공하는 관계 기반 동적 접근제어 모델을 제안하여 소셜 네트워크 서비스의 특성에 적합하면서 프라이버시 침해에 대한 보안성을 향상시킬 수 있는 방법을 제공한다.
Abstract
The social network service is a online service letting users express the personality and enhancing the human network. However, these features result in side effects which diffuse personal information and make users access to treacherousinformation. Therefore, various access control models have been proposed. However, the access control mechanisms whichencrypt data are only able to be applied for controlling access from direct node, and the access control mechanisms withoutdata encryption allow service provider to access all the information. Moreover, both mechanisms do not consider dynamicchanges in reliability of the users. In this paper, we propose relationship-based dynamic access control model includingencryption of sensitive data, which consider the characteristics of SNS and improves the security of SNS.
참고문헌 (27)
- NB Ellison, "Social network sites: definition, history, and scholarship", Journal of Computer‐Mediated Communication, 13(1), pp.210~230 (2007)
- KY Lin, "Why people use social networking sites : an empirical study integrating network externalities and motivation theory", Computers in Human Behavior, 27(3), pp.1152~1161 (2011)
- R Gross, "Information revelation and privacy in online social networks", ACM workshop on Privacy in the electronic society, pp.71~80 (2005)
- B Debatin, "Facebook and online privacy: attitudes, behaviors, and unintended consequences", Journal of Computer‐Mediated Communication, 15(1), pp.83~108 (2009)
- S Ye, "Measuring message propagation and social influence on Twitter. com", LNCS, 6430, pp.216~231 (2010), Springer Social informatics
- B Krishnamurthy, "On the leakage of personally identifiable information via online social networks", 2nd ACM workshop on Online social networks, pp.7~12 (2009)
- Security issues and recommendations for online social networks, "G Hogben", ENISA, ~, pp.ENISA Position Paper, no. 1 (2007)
- C Zhang, "Privacy and security for online social networks: challenges and opportunities", IEEE Network, 24(4), pp.13~18 (2010)
- R Baden, "Persona: an online social network with user-defined privacy", ACM SIGCOMM Computer Communication Review, 39(4), pp.135~146 (2009)
- S Jahid, "EASiER: Encryption-based access control in social networks with efficient revocation", 6th ACM Symposium on Information, Computer and Communications Security, pp.411~415 (2011)
- F Raji, "Online social network with flexible and dynamic privacy policies", CSI International Symposium on. IEEE (2011)
- PW.L. Fong, "Relationship -based access control policies and their policy languages", 6th ACM symposium on Access control models and technologies, pp.51~60 (2011)
- B Carminati, "Semantic web-based social network access control", computers & security, 30(2), pp.108~115 (2010)
- Y Cheng, "“A user -to-user relationship-based access control model for online social networks,”Data and Applications Security and Privacy XXVI", LNCS, 7371, pp.8~24 (2012)
- L Banks, "All friends are not created equal: an interaction intensity based approach to privacy in online social networks", CSE 09. International Conference on IEEE, 4, pp.970~974 (2009)
- 이창훈, "소셜 네트워크 서비스에서의 동적 사용자 신뢰도 평가 스킴", 정보보호학회논문지, 23(2), pp.157~168 (2013), 한국정보보호학회
- J Park, "Acon:activity-centric access control for social computing", Availability, Reliability and Security (ARES), 2011 Sixth International Conference on IEEE, pp.242~247 (2011)
- J Park, "A user-activity-centric framework for access control in online social networks", Internet Computing, 15(5), pp.62~65 (2011)
- S Guha, "NOYB : Privacy in online social networks", 1st workshop on Online social networks ACM, pp.49~54 (2008)
- MM. Lucas, "Flybynight:mitigating the privacy risks of social networking", 7th ACM workshop on Privacy in the electronic society, pp.1~8 (2008)
- A Shamir, "How to share a secret", Communications of the ACM, 22(11), pp.612~613 (1979)
- G Ateniese, "Improved proxy re-encryption schemes with applications to secure distributed storage", ACM Transactions on Information and System Security, 9(1), pp.1~30 (2006)
- L Backstrom, "Four degrees of separation", 3rd Annual ACM Web Science Conference, pp.33~42 (2012)
- 송희석, "소셜네트워크에서 신뢰의 전이성과 결합성에 관한 연구", Journal of Information Technology Applications & Management, 18(4), pp.41~53 (2011), 한국데이타베이스학회
- J Nützel, "“Towards trust in digital rights management systems,”Trust and Privacy in Digital Business", LNCS, 4083, pp.162~171 (2006)
- T Acar, "“Affine pairings on ARM,”Pairing - Based Cryptography, Pairing 2012 5th International Conference", LNCS, 7708, pp.203~209 (2012)
- J. A. Akinyele, "Securing electronic medical records using attribute-based encryption on mobile devices", 1st ACM workshop on security and privacy in smartphones and mobile devices, pp.75~86 (2011)