Title :
Inference attacks by third-party extensions to social network systems
Author :
Ahmadinejad, Seyed Hossein ; Anwa, Mohd ; Fong, Philip W L
Author_Institution :
Dept. of Comput. Sci., Univ. of Calgary, Calgary, AB, Canada
Abstract :
We study inference attacks that can be launched via the extension API of Facebook. We explain the threat of these attacks through a reduction to authentication attacks, devise a taxonomy for such attacks, and propose a risk metric to help subscribers of third-party applications refine their privacy expectations.
Keywords :
application program interfaces; data privacy; social networking (online); API; Facebook; authentication attacks; inference attacks; privacy expectations; social network systems; third-party extensions; Authentication; Data structures; Facebook; Inference algorithms; Measurement; Privacy;
Conference_Titel :
Pervasive Computing and Communications Workshops (PERCOM Workshops), 2011 IEEE International Conference on
Conference_Location :
Seattle, WA
Print_ISBN :
978-1-61284-938-6
Electronic_ISBN :
978-1-61284-936-2
DOI :
10.1109/PERCOMW.2011.5766884
