Social applications: exploring a more secure framework

Online social network sites, such as MySpace, Facebook and others have grown rapidly, with hundreds of millions of active users. A new feature on many sites is social applications – applications and services written by third party developers that provide additional functionality linked to a user’s profile. However, current application platforms put users at risk by permitting the disclosure of large amounts of personal information to these applications and their developers. This rmally abstracts and defines the current access control model applied to these applications, and builds on it to create a more secure framework. We do so in the interest of preserving as much of the current architecture as possible, while seeking to provide a practical balance between security and privacy needs of the users, and the needs of the applications to access users’ information. We present a user study of our interface design for setting a user-to-application policy. Our results indicate that th...

• Type: Conference
• Year: 2009
• Where: SOUPS
• Authors: Andrew Besmer, Heather Richter Lipford, Mohamed Shehab, Gorrell Cheek
• Keywords: Access Control, Access Control Model, Security Privacy, Social Network Sites, SOUPS 2009