Towards PII-based Multiparty Access Control for Photo Sharing in Online Social Networks

Survey on Access Control for Community-Centered Collaborative Systems

“…Similarly to a controlled experiment, this type of study involves observing users while they are performing specific access control tasks. However, the main difference lies in the Evaluation Method Feature studied Source Controlled Experiment Usefulness, Understanding, [Squicciarini et al 2010] Fairness of Collaborative Privacy Settings Balance between privacy protection and data sharing [Hu et al 2012] Likability, Simplicity [Hu et al 2011;Hu et al 2013] Control [Hu et al 2011;Hu et al 2013;Vishwamitra et al 2017 [Squicciarini et al 2010] Policy Generation Time ] Policy Integration Time [Mazzoleni et al 2008] Policy Evaluation Time [Damen et al 2014;Hu et al 2013;Mahmudlu et al 2016;Mazzoleni et al 2008;Vishwamitra et al 2017] Certificate Path Discovery Time, [Carminati et al 2009 [Damen et al 2014] Table VII: Evaluation methods applied to access control systems tailored to community-centered environments effect that is assessed: in controlled experiments it can be the cost, effectiveness, correctness of policies, etc., while in this type of study the focus is placed only on usability. -Performance Evaluation.…”

“…A different experimental design that does not suffer of internal validity has been adopted in [Hu et al 2011;Hu et al 2013;Such and Criado 2016;Rajtmajer et al 2016;Vishwamitra et al 2017]. In these experiments, the subjects performed a task using the proposed access control system.…”

“…These models enable the collaborative specification of policies aiming at the protection of resources co-owned by multiple users [Bahri et al 2015;Carminati and Ferrari 2011;Ilia et al 2017;Mehregan and Fong 2016;Rajtmajer et al 2016;Squicciarini et al 2010;Wishart et al 2010;Xiao and Tan 2012;Vishwamitra et al 2017]. Data governance models based on multi-ownership implicitly assume that all entities related to a data object have the same level of authority over the object.…”

“…Accordingly, they propose a bounded rationality model building on the quantal response and recency models [Rajtmajer et al 2016], which accounts for users' limitations and yet provides guarantees of success and well models users' actions. Recent work also recognized that users can be influenced by their acquaintances and, thus, can adjust their decision accordingly [Hu et al 2011;Such and Criado 2016;Vishwamitra et al 2017]. For instance, Hu et al [2011] propose a mechanism for collaborative data management in online social networks.…”

“…As a consequence, several research efforts have focused on the design of novel models and mechanisms able to provide fine-grained control over the access and usage of sensitive resources shared in these environments. In particular, much attention has been placed on access control issues in the social computing domain, wherein a large amount of personal content is often shared among users (e.g., Carminati et al 2009;Damen and Zannone 2013;Hu et al 2013;Squicciarini et al 2010;Xiao and Tan 2012;Rajtmajer et al 2016;Vishwamitra et al 2017]).…”