NDLI: Social applications: exploring a more secure framework

Please wait, while we are loading the content...

Revealing hidden context: improving mental models of personal firewall users

A "nutrition label" for privacy

Look into my eyes!: can you guess my password?

Serial hook-ups: a comparative usability study of secure device pairing methods

Sanitization's slippery slope: the design and study of a text revision assistant

Designing and evaluating usable security and privacy technology

Threshold things that think: usable authorization for resharing

flyByNight: mitigating the privacy risks of social networking

Redirects to login pages are bad, or are they?

Short and long term research suggestions for NSF and NIST

Social applications: exploring a more secure framework

Challenges in supporting end-user privacy and security management with social navigation

Personal choice and challenge questions: a security and usability assessment

Usability and security of out-of-band channels in secure device pairing protocols

Balancing usability and security in a video CAPTCHA

Think Evil (tm)

Not one click for security?

Conditioned-safe ceremonies and a user study of an application to web authentication

Ecological validity in studies of security and human behaviour

School of phish: a real-world evaluation of anti-phishing training

Ubiquitous systems and the family: thoughts about the networked home

1 + 1 = you: measuring the comprehensibility of metaphors for configuring backup authentication

Games for extracting randomness

How users use access control

Privacy stories: confidence in privacy behaviors through end user programming

Graphical passwords as browser extension: implementation and usability study

Invisible HCI-SEC: ways of re-architecting the operating system to increase usability and security

A new graphical password scheme against spyware by using CAPTCHA

It's no secret: measuring the security and reliability of authentication via 'secret' questions

Technology transfer of successful usable security research into product

The impact of expressiveness on the effectiveness of privacy mechanisms for location-sharing

It's not what you know, but who you know: a social approach to last-resort authentication

The family and communication technologies

Designing for different levels of social inference risk

A user study of the expandable grid applied to P3P privacy policy visualization

How does the emergence of reputation mechanisms affect the overall trust formation mechanisms, implicit and explicit, in the online environment?

Integrating usability and accessibility in information assurance education

Who's viewed you?: the impact of feedback in a mobile location-sharing application

Educated guess on graphical authentication schemes: vulnerabilities and countermeasures

New directions in multisensory authentication

BayeShield: conversational anti-phishing user interface

Machine learning attacks against the Asirra CAPTCHA

Recall-a-story, a story-telling graphical password system

A comparative study of online privacy policies and formats

Escape from the matrix: lessons from a case-study in access-control requirements

Capturing social networking privacy preferences: can default policies help alleviate tradeoffs between expressiveness and user burden?

The impact of privacy indicators on search engine browsing patterns

Privacy suites: shared privacy for social networks

Usable deidentification of sensitive patient care data

Analyzing use of privacy policy attributes in a location sharing application

Studying location privacy in mobile applications: 'predator vs. prey' probes

Treat 'em like other devices: user authentication of multiple personal RFID tags

Textured agreements: re-envisioning electronic consent

A multi-method approach for user-centered design of identity management systems

Social applications: exploring a more secure framework

Content Provider	ACM Digital Library
Author	Besmer, Andrew Lipford, Heather Richter Shehab, Mohamed Cheek, Gorrell
Abstract	Online social network sites, such as MySpace, Facebook and others have grown rapidly, with hundreds of millions of active users. A new feature on many sites is social applications -- applications and services written by third party developers that provide additional functionality linked to a user's profile. However, current application platforms put users at risk by permitting the disclosure of large amounts of personal information to these applications and their developers. This paper formally abstracts and defines the current access control model applied to these applications, and builds on it to create a more secure framework. We do so in the interest of preserving as much of the current architecture as possible, while seeking to provide a practical balance between security and privacy needs of the users, and the needs of the applications to access users' information. We present a user study of our interface design for setting a user-to-application policy. Our results indicate that the model and interface work for users who are more concerned with their privacy, but we still need to explore alternate means of creating policies for those who are less concerned.
Starting Page	1
Ending Page	10
Page Count	10
File Format	PDF
ISBN	9781605587363
DOI	10.1145/1572532.1572535
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2009-07-15
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Access control Privacy Web 2.0 Social networking applications Security
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in