NDLI: Your love is public now: questioning the use of personal information in authentication

Please wait, while we are loading the content...

AppInk: watermarking android apps for repackaging deterrence

Multi-key leakage-resilient threshold cryptography

Looking at the bag is not enough to find the bomb: an evasion of structural methods for malicious PDF files detection

SocialWatch: detection of online service abuse via large-scale social graphs

The role and effectiveness of cryptography in network virtualization: a position paper

Efficient dynamic provable possession of remote data via balanced update trees

Expressive search on encrypted data

Gadge me if you can: secure and efficient ad-hoc instruction-level randomization for x86 and ARM

Secure cloud-assisted location based reminder

k-anonymous reputation

Robust network traffic identification with unknown applications

TabShots: client-side detection of tabnabbing attacks

LogicScope: automatic discovery of logic vulnerabilities within web applications

Towards fully incremental cryptographic schemes

PSiOS: bring your own privacy & security to iOS devices

Privacy-preserving multi-keyword text search in the cloud supporting similarity-based ranking

Efficient user-space information flow control

Privacy settings in social networking systems: what you cannot control

Weak leakage-resilient client-side deduplication of encrypted data in cloud storage

Towards asymmetric searchable encryption with message recovery and flexible search authorization

Enforcing system-wide control flow integrity for exploit detection and diagnosis

DroidChameleon: evaluating Android anti-malware against transformation attacks

Privacy-preserving smart metering with regional statistics and personal enquiry services

STRIDE: sanctuary trail -- refuge from internet DDoS entrapment

Fuzzing the ActionScript virtual machine

Protecting function pointers in binary

Anonymous attribute-based encryption supporting efficient decryption test

On the effectiveness of API-level access control using bytecode rewriting in Android

Practical and post-quantum authenticated key exchange from one-way secure key encapsulation mechanism

Trustworthy distributed computing on social networks

Data-oblivious graph algorithms for secure computation and outsourcing

Boolean symmetric searchable encryption

Bind your phone number with caution: automated user profiling through address book matching on smartphone

Protecting privacy by sanitizing personal data: a new approach to anonymous credentials

Practical verification of WPA-TKIP vulnerabilities

Sensing-enabled channels for hard-to-detect command and control of mobile devices

The (un)reliability of NVD vulnerable versions data: an empirical experiment on Google Chrome vulnerabilities

A group signature scheme with unbounded message-dependent opening

Designing leakage-resilient password entry on touchscreen mobile devices

Blank digital signatures

On the feasibility of inference attacks by third-party extensions to social network systems

SecLaaS: secure logging-as-a-service for cloud forensics

Multi-channel broadcast encryption

Towards preventing QR code based attacks on android phone using security warnings

An information-flow type-system for mixed protocol secure computation

Faster secure two-party computation with less memory

Horizon extender: long-term preservation of data leakage evidence in web traffic

Attribute-based fine-grained access control with efficient revocation in cloud storage systems

Your love is public now: questioning the use of personal information in authentication

Pseudorandom signatures

Dynamix: anonymity on dynamic social structures

An empirical study on the software integrity of virtual appliances: are you really getting what you paid for?

Comparative study of multicast authentication schemes with application to wide-area measurement system

Time evolving graphical password for securing mobile devices

Covert computation: hiding code in code for obfuscation purposes

Protecting access privacy of cached contents in information centric networks

DroidAlarm: an all-sided static analysis tool for Android privilege-escalation malware

Proof of plaintext knowledge for code-based public-key encryption revisited

An efficient and probabilistic secure bit-decomposition

Defining verifiability in e-auction protocols

Verifiable and private top-k monitoring

Your love is public now: questioning the use of personal information in authentication

Content Provider	ACM Digital Library
Author	Gupta, Payas Gottipati, Swapna Jiang, Jing Gao, Debin
Abstract	Most social networking platforms protect user's private information by limiting access to it to a small group of members, typically friends of the user, while allowing (virtually) everyone's access to the user's public data. In this paper, we exploit public data available on Facebook to infer users' undisclosed interests on their profile pages. In particular, we infer their undisclosed interests from the public data fetched using Graph APIs provided by Facebook. We demonstrate that simply liking a Facebook page does not corroborate that the user is interested in the page. Instead, we perform sentiment-oriented mining on various attributes of a Facebook page to determine the user's real interests. Our experiments conducted on over 34,000 public pages collected from Facebook and data from volunteers show that our inference technique can infer interests that are often hidden by users on their personal profile with moderate accuracy. We are able to disclose 22 interests of a user and find more than 80,097 users with at least 2 interests. We also show how this inferred information can be used to break a preference based backup authentication system.
Starting Page	49
Ending Page	60
Page Count	12
File Format	PDF
ISBN	9781450317672
DOI	10.1145/2484313.2484319
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2013-05-08
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Semantic analysis Preference based authentication Facebook Graph api
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in