Think before you share in OSNs: Textual content and connection weight put you at higher privacy risk

Year 2022, Volume: 11 Issue: 2, 25 - 51, 30.06.2022

Önder Çoban , Ali İnan , Selma Ayşe Özel

Abstract

The widespread use of OSNs has brought forward the issue of privacy protection over OSNs, as sensitive information of users needs to remain private. Most users are unaware of possible privacy risks associated with sharing personal information in their accounts. Privacy settings of OSNs focus on protecting users' information just by providing them with means of configuring the audience of shared information. As such, privacy risk estimation (or scoring) is a hot topic in the field of OSN research and aims to develop risk measuring tools to ensure user privacy in OSNs. Conventional studies in the area often rely on synthetically generated or survey-based data and do not make any effort to infer private attribute values of users to utilize inference success in privacy scoring of these users. In this study, we propose a novel framework that involves populating a response matrix by using attribute inference and obtaining network aware-risk scores not just by using users' connections but weights of these connections as well. We perform attribute inference of users based on both their textual contents and connections. Our rule-based inference mechanism employed on contents produces inference accuracies ranging from 0.54 to 1.0 depending on the attribute at hand. On the other hand, the inference mechanism involving users' social connections produces inference accuracies of 1.0 almost for all of the considered attributes. We present results and challenges of attribute inference and use inferred attributes in privacy risk scoring. In addition, unlike existing works, we use and show that social tie strengths have to be taken into account in network-aware privacy risk scoring.

Keywords

Facebook, privacy risk estimation, social tie strength, online social networks.

References

• K. Liu and E. Terzi. ``A Framework for Computing the Privacy Scores of Users in Online Social Networks", In Ninth IEEE International Conference on Data Mining, Florida, USA, pp. 288-297, 6-9 December 2009.
• A. Srivastava and G. Geethakumari. ``Measuring privacy leaks in online social networks", In IEEE International Conference on Advances in Computing, Communications and Informatics (ICACCI), New York, USA, pp. 2095-2100, 22-25 August 2013.
• M. Sramka. ``Evaluating Privacy Risks in Social Networks from the User’s Perspective", In: Advanced Research in Data Privacy. Studies in Computational Intelligence, G. Navarro-Arribas and V. Torra (eds), Springer, Cham, 2015, pp. 251-267.
• C. Akcora, B. Carminati, and E. Ferrari. ``Privacy in social networks: How risky is your social graph?", In IEEE 28th International Conference on Data Engineering, Arlington, USA, pp. 9-19, 1-5 April 2012.
• S. Oukemeni, H. Rifà-Pous, and J. M. M. Puig. ``IPAM: Information Privacy Assessment Metric in Microblogging Online Social Networks", IEEE Access, Vol.7, pp. 1-20, August 2019.
• E. Aghasian, S. Garg, and J. Montgomery. ``A privacy-enhanced friending approach for users on multiple online social networks", Computers, Vol.7, No.3, pp. 1-12, August 2018.
• J. Caramujo and A. M. R. da Silva. ``Analyzing privacy policies based on a privacy-aware profile: The Facebook and LinkedIn case studies", In IEEE 17th Conference on Business Informatics, Lisbon, Portugal, pp. 77-84, 13-16 July 2015.
• Y. Yang, J. Lutes, F. Li, B. Luo, and P. Liu. ``Stalking online: on user privacy in social networks", In Proceedings of the second ACM conference on Data and Application Security and Privacy, Texas, USA, pp. 37-48, 7-9 February 2012.
• J. Alemany, E. del Val, J. Alberola, and A. García-Fornes. ``Estimation of privacy risk through centrality metrics", Future Generation Computer Systems, Vol.82, pp. 63-76, May 2018.
• E. Aghasian, S. Garg, L. Gao, S. Yu, and J. Montgomery. ``Scoring users’ privacy disclosure across multiple online social networks", IEEE access, Vol.5, pp. 13118-13130, 31 July 2017.
• N. Talukder, M. Ouzzani, A. K. Elmagarmid, H. Elmeleegy, and M. Yakout. ``Privometer: Privacy protection in social networks", In IEEE 26th International Conference on Data Engineering Workshops (ICDEW), California, USA, pp. 266-269, 1-6 March 2010.
• M. Kosinski, D. Stillwell, and T. Graepel. ``Private traits and attributes are pre- dictable from digital records of human behavior", Proceedings of the National Academy of Sciences, Vol.110, No.15, pp. 5802–5805, 9 April 2013.
• A. Mislove, B. Viswanath, P. K. Gummadi, and P. Druschel. ``You are who you know: inferring user profiles in online social networks", In Proceedings of Web Search and Data Mining, New York, USA, pp. 251–260, 4-6 February 2010.
• B. S. Vidyalakshmi, R. K. Wong, M. Ghanavati, and C. H. Chi. ``Privacy as a service in social network communications", In IEEE International Conference on Services Computing, Alaska, USA, pp. 456-463, February 2014.
• M. H. Veiga and C. Eickhoff. ``Privacy leakage through innocent content sharing in online social networks", 2016, arXiv preprint arXiv:1607.02714.
• A. Srivastava and G. Geethakumari. ``Privacy landscape in online social networks", International Journal of Trust Management in Computing and Communications, Vol.3, No.1, pp. 19-39, October 2019.
• B. S. Vidyalakshmi, R. K. Wong, and C. H. Chi. ``Privacy scoring of social network users as a service", In IEEE International Conference on Services Computing, New York, USA, pp. 218-225, 27 June - 2 July 2015.
• L. Bioglio and R. G. Pensa. ``Impact of neighbors on the privacy of individuals in online social networks", Procedia Computer Science, Vol.108, pp. 28-37, June 2017.
• T. Minkus and N. Memon. ``On a scale from 1 to 10, how private are you? scoring facebook privacy settings", In Proceedings of the Workshop on Usable Security, California, USA, pp. 1-6, 23 February 2014.
• P. Gundecha, G. Barbier, and H. Liu. ``Exploiting vulnerability to secure user privacy on a social networking site", In Proceedings of the 17th ACM SIGKDD international conference on Knowledge discovery and data mining, San Diego, USA, pp. 511-519, 21-24 August 2011.
• Q. Wang, H. Xue, F. Li, D. Lee, and B. Luo. ``# DontTweetThis: Scoring Private Information in Social Networks", Proceedings on Privacy Enhancing Technologies, Vol.2019, No.4, pp. 72-92, October 2019.
• J. A. Biega, K. P. Gummadi, I. Mele, D. Milchevski, C. Tryfonopoulos, and G. Weikum. ``R-susceptibility: An ir-centric approach to assessing privacy risks for users in online communities", In Proceedings of the 39th International ACM SIGIR conference on Research and Development in Information Retrieval, Pisa, Italy, pp. 365-374, 17-21 July 2016.
• X. Song, X. Wang, L. Nie, X. He, Z. Chen, and W. Liu. ``A personal privacy preserving framework: I let you know who can see what", In The 41st International ACM SIGIR Conference on Research and Development in Information Retrieval, Michigan, USA, pp. 295-304, 8-12 July 2018.
• A. Caliskan Islam, J. Walsh, and R. Greenstadt. ``Privacy detective: Detecting private information and collective privacy behavior in a large social network", In Proceedings of the 13th Workshop on Privacy in the Electronic Society, Arizona, USA, pp. 35-46, 3 November 2014.
• X. Li, Y. Yang, Y. Chen, and X. Niu. ``A Privacy Measurement Framework for Multiple Online Social Networks against Social Identity Linkage", Applied Sciences, Vol.8, No.10, pp. 1-19, October 2018.
• H. Mao, X. Shuai, and A. Kapadia. ``Loose tweets: an analysis of privacy leaks on twitter", In Proceedings of the 10th annual ACM workshop on Privacy in the electronic society, Chicago, Illinois, USA, pp. 1-12, 17 October 2011.
• K. Thomas, C. Grier, and D. M. Nicol. ``unfriendly: Multi-party privacy risks in social networks", In International Symposium on Privacy Enhancing Technologies Symposium, Berlin, Germany, pp. 236-252, 21-23 July 2010.
• O. Coban, A. Inan, and S. A. Ozel. ``Privacy Risk Analysis for Facebook users", In 28th Signal Processing and Communications Applications Conference, Gaziantep, Turkey, pp. 1-4, 5-7 October 2020.
• R. G. Pensa and G. Di Blasi. ``A privacy self-assessment framework for online social networks", Expert Systems with Applications, Vol.86, pp. 18-31, 15 November 2017.
• R. G. Pensa, G. Di Blasi, and L. Bioglio. ``Network-aware privacy risk estimation in online social networks", Social Network Analysis and Mining, Vol.9, No.1, April 2019.
• R. G. Pensa and G. Di Blasi. ``A semi-supervised approach to measuring user privacy in online social networks", In International Conference on Discovery Science, Bari, Italy, pp. 392-407, 19-21 October 2016.
• R. G. Pensa and G. Di Blasi. ``A centrality-based measure of user privacy in online social networks", In Proceedings of the IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, California, USA, pp. 1438-1439, 18-21 August 2016.
• J. Domingo-Ferrer. ``Rational privacy disclosure in social networks", In International Conference on Modeling Decisions for Artificial Intelligence, Perpignan, French Catalonia, France, pp. 255-265, 27-29 October 2010.
• E. M. Maximilien, T. Grandison, T. Sun, D. Richardson, S. Guo, and K. Liu. ``Privacy-as-a-service: Models, algorithms, and results on the facebook platform", In Proceedings of W2SP 2009: Web 2.0 Security and Pivacy 2009, California, USA, pp. 1-4, 21 May 2009.
• I. Symeonidis, F. Beato, P. Tsormpatzoudi, and B. Preneel. ``Collateral damage of Facebook Apps: an enhanced privacy scoring model", 2015, IACR Cryptology ePrint Archive.
• O. Coban, A. Inan, and S. A. Ozel. ``Inverse document frequency-based sensitivity scoring for privacy analysis", Signal, Image and Video Processing, Vol.16, pp. 735-743, April 2022.
• A. Braunstein, L. Granka, and J. Staddon. ``Indirect content privacy surveys: measuring privacy without asking about it", In Proceedings of the Seventh Symposium on Usable Privacy and Security, Pittsburgh, PA, USA, pp. 1-14, 20-22 July 2011.
• A. Djoudi and G. Pujolle. ``Social Privacy Score Through Vulnerability Contagion Process", In Fifth Conference on Mobile and Secure Services (MobiSecServ), Florida, USA, pp. 1-6, 2-3 March 2019.
• A. Srivastava and G. Geethakumari. ``A privacy settings recommender system for online social networks", In International Conference on Recent Advances and Innovations in Engineering, Jaipur, India, pp. 1-6, 9-11 May 2014.
• J. L. Becker. ``Measuring privacy risk in online social networks", MSc thesis, University of California, Sacramento, 2009.
• Y. Zeng, Y. Sun, L. Xing, and V. Vokkarane. ``A study of online social network privacy via the tape framework", IEEE Journal of Selected Topics in Signal Processing, Vol.9, No.7, pp. 1270-1284, October 2015.
• H. Simo, H. Shulman, M. Schufrin, S. L. Reynolds, and J. Kohlhammer. ``PrivInferVis: Towards Enhancing Transparency over Attribute Inference in Online Social Networks", In IEEE INFOCOM 2021-IEEE Conference on Computer Communications Workshops, Virtual Conference, pp. 1-2, 10-13 May 2021.
• L. Bioglio, S. Capecchi, F. Peiretti, D. Sayed, A. Torasso, and R. G. Pensa. ``A social network simulation game to raise awareness of privacy among school children", IEEE Transactions on Learning Technologies, Vol.12, No.4, pp. 456-469, December 2019.
• A. Halimi and E. Ayday. ``Real-time privacy risk quantification in online social networks", In Proceedings of the IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, Virtual Event Netherlands, pp. 74-81, 8-11 November 2021.
• O. Coban, A. Inan, and S. A. Ozel. ``Towards the design and implementation of an OSN crawler: a case of Turkish Facebook users", International Journal of Information Security Science, Vol.9, No.2, pp. 76-93, June 2020.
• O. Coban. ``An Exploratory Analysis of Leaked Facebook Data: A Case of Turkish Users", International Journal of Information Security Science, Vol.10, No.4, pp. 119-137, December 2021.
• C. G. Akcora, B. Carminati, and E. Ferrari. ``Risks of friendships on social networks", In IEEE 12th International Conference on Data Mining, Brussels, Belgium, pp. 810-815, 10-13 December 2012.
• I. Kahanda and J. Neville. ``Using transactional information to predict link strength in online social networks", In Third International AAAI Conference on Weblogs and Social Media, California, USA, pp. 74-81, 17-20 May 2009.
• S. Krakan, L. Humski, and Z. Skocir, Z. ``Determination of friendship intensity between online social network users based on their interaction", Tehnicki vjesnik, Vol.25, No.3, pp. 655-662, 2018.
• Z. Liu, H. Li, and C. Wang. ``NEW: A Generic Learning Model for Tie Strength Prediction in Networks", Neurocomputing, Vol.406, pp. 282-292, September 2020.
• Y. D. Seo, Y. G. Kim, E. Lee, and D. K. Baik. ``Personalized recommender system based on friendship strength in social network services", Expert Systems with Applications, Vol.69, pp. 135-148, March 2017.
• S. S. Rodrıguez, R. P. D. Redondo, A. F. Vilas, and J. J. P. Arias. ``Using Facebook activity to infer social ties", In Proceedings of the 2nd International Conference on Cloud Computing and Services Science, Porto, Portugal, pp. 325-333, 18-21 April 2012.
• J. Ilic, L. Humski, D. Pintar, M Vranic, and Z. Skocir. ``Proof of concept for comparison and classification of online social network friends based on tie strength calculation model", In 6th interantional conference on information society and technology, Barcelona, Spain, pp. 15-164, 18-20 March 2016.
• Y. Kılıç and A. Inan A. ``QPR-EVAL: A Quantitative Framework For Privacy Risk Score Evaluation", submitted manuscript.
• O. Coban. ``Attribute inference over real-world online social networks: a comprehensive privacy analysis", Doctoral dissertation, Dept. Comp. Eng., Cukurova Univ., Adana, Turkey, 2021.
• O. Coban, A. Inan, and S. A. Özel. ``Facebook Tells Me Your Gender: An Exploratory Study of Gender Prediction for Turkish Facebook Users", Transactions on Asian and Low-Resource Language Information Processing, Vol.20, No.4, pp. 1-38, May 2021.
• A. Canaydın. Github Repo: alpcanaydin/liseler. [Online] Available: https://github.com/alpcanaydin/liseler/blob/master/liseler-web/public/data.json, accessed: 12.05.2021.
• Anonymous. Github Repo: Liseler-Ilkokullar. [Online] Available: https://github.com/SqlHareketi/Liseler-Ilkokullar/blob/master/liselerilkokullar.sql, accessed: 13.05.2021.
• F. Sarhan. Archived Github Repo: ButunUniversiteListesiCrawler. [Online] Available: https://github.com/f9n/ButunUniversiteListesiCrawler/blob/master/universities.txt, accessed: 12.06.2021.
• D. Irani, M. Balduzzi, D. Balzarotti, E. Kirda, and C. Pu. ``Reverse social engineering attacks in online social networks", In International conference on detection of intrusions and malware, and vulnerability assessment, Amsterdam, Netherlands, pp. 55-74, 7-8 July 2011.
• Y. Wang, T. Liu, Q. Tan, J. Shi, and L. Guo. ``Identifying users across different sites using usernames", Procedia Computer Science, Vol.80, pp. 376-385, June 2016.
• S. Brin and L. Page. ``The anatomy of a large-scale hypertextual web search engine", Computer networks and ISDN systems, Vol.30, No.1-7, pp. 107-117, April 1998.