Inference attacks by third-party extensions to social network systems

—We study inference attacks that can be launched via the extension API of Facebook. We explain the threat of these attacks through a reduction to authentication attacks, devise a taxonomy for such attacks, and propose a risk metric to help subscribers of third-party applications refine their privacy expectations.

• Type: Journal
• Year: 2011
• Where: PERCOM
• Authors: Seyed Hossein Ahmadinejad, Mohd M. Anwar, Philip W. L. Fong
• Keywords: Computer Networks, Extension Api, Facebook, Inference Attacks, PERCOM 2011