LAMP - Label-Based Access-Control for More Privacy in Online Social Networks

Abstract

Access control in Online Social Networks (OSNs) is generally approached with a relationship-based model. This limits the options in expressing privacy preferences to only the types of relationships users establish in the OSN. Moreover, current proposals do not address the privacy of dependent information types, such as comments or likes, at their atomic levels of ownership. Rather, the privacy of these data elements is holistically dependent on the aggregate object they belong to. To overcome this, we propose LAMP, a model that deploys fine grained labelbased access control for information sharing in OSNs. Users in LAMP assign customized labels to their friends and to all types of their information; whereas access requests are evaluated by security properties carefully designed to establish orders between requestor's and information's labels. We prove the correctness of the suggested model, and we perform performance experiments based on different access scenarios simulated on a real OSN graph. We also performed a preliminary usability study that compared LAMP to Facebook privacy settings. Walt Mike Dima Javier Lina Family colleagues  Only family members (but all of them) will access photos  Only colleagues (but all of them) will access the video

Fine-Grained Access Control Within NoSQL Document-Oriented Datastores

“…As a matter of fact, NoSQL datastores outperform relational database management systems (RDBMSs) with respect to the efficiency of data analysis, the flexibility, and the scalability of data management. Current surveys 1 show that MongoDB, 2 which is the current most popular NoSQL datastore, immediately follows, in terms of diffusion, widely used RDBMSs, such as Oracle Database 3 or MySQL. 4 This shows that NoSQL datastores are affirmed solutions which compete in terms of diffusion with RDBMSs.…”

“…FGAC has been recognized as a fundamental requirement in a variety of application scenarios, which range from data management and analysis systems (e.g., [8,9,22]), to social networks (e.g., [3,5,14]), and service oriented and mobile applications (e.g., [14]). Few NoSQL datastores provide a native support for FGAC, such as the key-value datastore Accumulo, 7 which enforces access control at cell level.…”