Search results

Enormous popularity of Social Networking Sites has introduced a great number of privacy risks. Even the most popular of all the social networking sites have characterized access control policies in terms of explicit tracking of the interpersonal relationships between the subjects, objects and their inter relation. In this paper we present a novel paradigm that accounts for a secure, yet sociable information flow model based on access control policies. We took advantage of real time success of the access control security policies in operating systems by implementing them on online social networks at the mandatory level so that the user's privacy does not have to be at stake by the growth of social network and activities or by the level of user understanding of the privacy settings provided by the social networking sites based on discretionary access control. We used Facebook and Google+ as case study and implemented the security policy in SecureWall to mitigate possible privacy leakage scenarios observed. We have implemented Chinese wall policy for community level privacy, Bell la-Padulla access control model to assure confidentiality to the user and Biba Access control model for providing Integrity. Since Bell la-Padulla and Biba models are basically meant to serve military security and therefore can risk sociability, we have combined the two models using Lipner Security Matrix in order to provide security without risking sociability. Our research can be adopted by online social networking sites for the mandatory level security especially for social networking in organizational specific activities.