Collateral damage of Facebook apps : friends, providers, and privacy interdependence
Symeonidis, Iraklis (Katholieke Universiteit Leuven. ESAT/COSIC)
Shirazi, Fatemeh (Katholieke Universiteit Leuven. ESAT/COSIC)
Biczók, Gergely (Budapesti Műszaki és Gazdaságtudományi Egyetem)
Pérez-Solà, Cristina (Universitat Autònoma de Barcelona. Departament d'Enginyeria de la Informació i de les Comunicacions)
Preneel, Bart (Katholieke Universiteit Leuven. ESAT/COSIC)

Date:	2016
Abstract:	Third-party apps enable a personalized experience on social networking platforms; however, they give rise to privacy interdependence issues. Apps installed by a user's friends can collect and potentially misuse her personal data inflicting collateral damage on the user while leaving her without proper means of control. In this paper, we present a multi-faceted study on the collateral information collection of apps in social networks. We conduct a user survey and show that Facebook users are concerned about this issue and the lack of mechanisms to control it. Based on real data, we compute the likelihood of collateral information collection affecting users; we show that the probability is significant and depends on both the friendship network and the popularity of the app. We also show its significance by computing the proportion of exposed user attributes including the case of profiling, when several apps are offered by the same provider. Finally, we propose a privacy dashboard concept enabling users to control the collateral damage.
Grants:	Ministerio de Economía y Competitividad TIN2014-55243-P Ministerio de Economía y Competitividad FPU-AP2010-0078 Agència de Gestió d'Ajuts Universitaris i de Recerca 2015/SGR-691
Note:	Aquest volum de la publicació periòdica també es correspon a la monografia "ICT Systems Security and Privacy Protection"
Rights:	Aquest material està protegit per drets d'autor i/o drets afins. Podeu utilitzar aquest material en funció del que permet la legislació de drets d'autor i drets afins d'aplicació al vostre cas. Per a d'altres usos heu d'obtenir permís del(s) titular(s) de drets.
Language:	Anglès
Document:	Article ; recerca ; Versió acceptada per publicar
Published in:	IFIP Advances in Information and Communication Technology, Vol. 471 (2016) , p. 194-208, ISSN 1868-4238

DOI: 10.1007/978-3-319-33630-5_14

Post-print 14 p, 2.2 MB

The record appears in these collections:
Research literature > UAB research groups literature > Research Centres and Groups (research output) > Engineering > Security of Networks and Distributed Applications (SENDA)
Articles > Research articles
Articles > Published articles