Research progress of access control model and policy in online social networks

Tian-zhu CHEN; Yun-chuan GUO; Ben NIU; Feng-hua LI

doi:10.11959/j.issn.2096-109x.2016.00086

您当前的位置：

首页 >

文章列表页 >

Research progress of access control model and policy in online social networks

Overview | 更新时间：2024-06-03

- Research progress of access control model and policy in online social networks
- Journal of network and information security Vol. 2, Issue 8, Pages: 1-9(2016)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2016.00086
  CLC： TP393
- Online First：2016-08，
  
  Published：15 August 2016
- 稿件说明：
移动端阅览
Tian-zhu CHEN, Yun-chuan GUO, Ben NIU, et al. Research progress of access control model and policy in online social networks[J]. Journal of network and information security, 2016, 2(8): 1-9.
DOI：

Tian-zhu CHEN, Yun-chuan GUO, Ben NIU, et al. Research progress of access control model and policy in online social networks[J]. Journal of network and information security, 2016, 2(8): 1-9. DOI： 10.11959/j.issn.2096-109x.2016.00086.

摘要

作为信息保护有效手段之一的访问控制技术，可以保障信息仅能被合法用户访问，防止信息的泄露，势必成为在线社交网络中信息保护方法的重要组成部分。通过分析在线社交网络的特点，从访问控制模型与访问控制策略2个角度出发，对目前在线社交网络中的访问控制研究进行深入探讨，并对相关研究进行整理与分析。

Abstract

As one of the effective approach to protecting information

access control which makes the information only accessed by legitimate users and prevents information leakage

has been widely used in online social networks.The characteristics of OSN were analyzed.From two angles of access control model and access control strategy

the research of access control in online social networks were discussed deeply

the related research was counted and analyzed.

关键词

Keywords

references

NI M , ZHANG Y , HAN W , et al . An empirical study on user access control in online social networks [C ] // The 21st ACM Symposium on Access Control Models and Technologies , Shanghai . c2016 : 13 - 23 .

HART M , JOHNSON R , STENT A . More content-less control:access control in the Web 2.0 [J ] . IEEE Web , 2007 , 2 .

ALI B , VILLEGAS W , MAHESWARAN M . A trust based approach for protecting user data in social networks [C ] // The 2007 Conference on Collaborative Research , Richmond Hill . c2007 : 288 - 293 .

FONG P W L , ANWAR M , ZHAO Z . A privacy preservation model for facebook-style social network systems [C ] // European Sympo-sium on Research in Computer Security , Heidelberg . c2009 : 303 - 320 .

NIN J , TORRA V . Possibilistic reasoning for trust-based access control enforcement in social networks [C ] // IEEE International Conference on Fuzzy Systems , Barcelona . c2010 : 1 - 6 .

VILLEGAS W , ALI B , MAHESWARAN M . An access control scheme for protecting personal data [C ] // The 6th Conference on Privacy,Security and Trust . c2008 : 24 - 35 .

CARMINATI B , FERRARI E , PEREGO A . Enforcing access control in Web-based social networks [J ] . ACM Transactions on In-formation and System Security (TISSEC) , 2009 , 13 ( 1 ): 6 .

CHENG Y , PARK J , SANDHU R . Relationship-based access con-trol for online social networks:beyond user-to-user relation-ships [C ] // International Conference on Privacy,Security,Risk and Trust . c2012 : 646 - 655 .

FONG P W L . Relationship-based access control:protection model and policy language [C ] // ACM Conference on Data and Applica-tion Security＆Privacy . c2011 : 191 - 202 .

FONG P W L , SIAHAAN I . Relationship-based access control policies and their policy languages [C ] // The 16th ACM Symposium on Access Control Models and Technologies . c2011 : 51 - 60 .

RIZVI S Z R , FONG P W L , CRAMPTON J , et al . Relation-ship-based access control for an open-source medical records sys-tem [C ] // ACM Symposium on Access Control Models and Tech-nologies . c2015 : 113 - 124 .

李晓峰 , 冯登国 , 陈朝武 , 等 . 基于属性的访问控制模型 [J ] . 通信学报 , 2008 , 29 ( 4 ): 90 - 98 .

LI X F , FENG D G , CHEN Z W , et al . Model for attribute based access control [J ] . Journal on Communications , 2008 , 29 ( 4 ): 90 - 98 .

沈海波 , 洪帆 . 面向 Web 服务的基于属性的访问控制研究 [J ] . 计算机科学 , 2006 , 33 ( 4 ): 92 - 96 .

SHEN H B . Study on attribute-based access control for Web ser-vices [J ] . Computer Science , 2006 , 33 ( 4 ): 92 - 96 .

王小明 , 付红 , 张立臣 . 基于属性的访问控制研究进展 [J ] . 电子学报 , 2010 , 38 ( 7 ): 1660 - 1667 .

WANG X M , FU H , ZHANG L C . Research progress on attrib-ute-based access control [J ] . Acta Electronica Sinica , 2010 , 38 ( 7 ): 1660 - 1667 .

HSU A C , RAY I . Specification and enforcement of location-aware attribute-based access control for online social networks [C ] // ACM International Workshop on Attribute Based Access Control . c2016 : 25 - 34 .

CHENG Y , PARK J , SANDHU R . Attribute-aware relation-ship-based access control for online social networks [C ] // IFIP An-nual Conference on Data and Applications Security and Privacy . c2014 : 292 - 306 .

PANG J , ZHANG Y . A new access control scheme for face-book-style social networks [C ] // International Conference on Avail-ability,Reliability and Security . c2013 : 1 - 10 .

BADEN R , BENDER A , SPRING N , et al . Persona:an online social network with user-defined privacy [J ] . ACM Sigcomm Com-puter Communication Review , 2009 , 39 ( 4 ): 135 - 146 .

JAHID S , MITTAL P , BORISOV N . EASiER:encryption-based access control in social networks with efficient revocation [C ] // ACM Symposium on Information,Computer and Communications Security . c2011 : 411 - 415 .

史斌 . 面向语义网的语义搜索引擎关键技术研究 [D ] . 北京 : 北京工业大学 , 2010 .

BIN S . The research on key technology of semantic search engine in semantic Web [D ] . Beijing : Beijing University of Technology , 2010 .

CARMINATI B , FERRARI E , HEATHERLY R , et al . Semantic Web-based social network access control [J ] . Computers and Secu-rity , 2011 , 30 ( 2 ).

HORROCKS I , PATEL-SCHNEIDER P F , BOLEY H , et al . SWRL:a semantic Web rule language combining OWL and rule ML [J ] . W3C Member Submission , 2004 , 21 : 79 .

CARMINATI B , FERRARI E , HEATHERLY R , et al . A semantic Web based framework for social network access control [C ] // ACM on Symposium on Access Control Models and Technologies . c2009 : 177 - 186 .

文峰 . 一种面向应用的多层次数据资源描述框架 [J ] . 计算机应用与软件 , 2013 , 30 ( 7 ): 221 - 223 .

WENG F . An application-oriented multi-level data resource de-scription frame [J ] . Computer Applications＆Software , 2013 , 30 ( 7 ): 221 - 220 .

JADLIWALA M , MAITI A , NAMBOODIRI V . Social puzzles:context-based access control in online social networks [C ] // Annual IEEE/IFIP International Conference on Dependable Systems and Networks . c2014 : 299 - 310 .

VILLATA S , COSTABELLO L , DELAFORGE N , et al . A social semantic Web access control model [J ] . Journal on Data Semantics , 2012 , 2 ( 1 ): 21 - 36 .

IMRAN-DAUD M , SÁNCHEZ D , VIEJO A . Privacy-driven access control in social networks by means of automatic semantic annota-tion [J ] . Computer Communications , 2016 , 76 : 12 - 25 .

徐仁佐 , 郑红军 , 陈斌 , 等 . 基于角色和上下文的访问控制模型 [J ] . 计算机应用研究 , 2004 , 21 ( 12 ): 140 - 142 .

XU R Z , ZHENG H J , CHEN B , et al . Role and context-based ac-cess control model [J ] . Application Research of Computers , 2004 .

ABDESSALEM T , DHIA I B . A reachability-based access control model for online social networks [C ] // ACM Symposium on Data-bases and Social Networks . c2011 : 31 - 36 .

KAPADIA A , ADU-OPPONG F , GARDINER C K , et al . Social circles:tackling privacy in social networks [C ] // Symposium on Usable Privacy Security . 2008 .

CHEEK G P , SHEHAB M . Policy-by-example for online social networks [C ] // ACM Symposium on Access Control Models and Technologies . c2012 : 23 - 32 .

RAVICHANDRAN R , BENISCH M , KELLEYP , et al . Capturing social networking privacy preferences [C ] // Symposium on Usable Privacy Security , California . c2009 : 1 - 18 .

BONNEAU J , ANDERSON J , CHURCH L , et al . Privacy suites:shared privacy for social networks [C ] // Symposium on Usable Privacy and Security , California . c2009 .

SQUICCIARINI A C , SUNDARESWARAN S , LIN D , et al . A3P:adaptive policy prediction for shared images over popular content sharing sites [C ] // ACM Conference on Hypertext and Hypermedia , Eindhoven . c2011 : 261 - 270 .

SQUICCIARINI A C , LIN D , SUNDARESWARAN S , et al . Pri-vacy policy inference of user-uploaded images on content sharing sites [J ] . IEEE Transactions on Knowledge＆Data Engineering ， 2015 , 27 ( 1 ): 193 - 206 .

SHEHAB M , TOUATI H . Semi-supervised policy recommendation for online social networks [C ] // International Conference on Ad-vances in Social Networks Analysis and Mining . c2012 : 360 - 367 .

张慧 , 方旭明 . 基于价格理论和博弈论的接入控制策略 [J ] . 通信学报 , 2008 , 29 ( 7 ): 94 - 102 .

ZHANG H , FANG X M . Pricing and game theory based admission control scheme [J ] . Journal on Communications , 2008 , 29 ( 7 ): 94 - 102 .

田有亮 , 马建峰 , 彭长根 , 等 . 秘密共享体制的博弈论分析 [J ] . 电子学报 , 2011 , 39 ( 12 ): 2790 - 2795 .

TIAN Y L , MA J F , PENG C G , et al . Game-theoretic analysis for the secret sharing scheme [J ] . Acta Electronica Sinica , 2011 , 39 ( 12 ): 2790 - 2795 .

SQUICCIARINI A C , SHEHAB M , PACI F . Collective privacy management in social networks [C ] // International Conference on World Wide Web . c2009 . 521 - 530 .

EPHRATI E , ROSENSCHEIN J S . The clarke tax as a consensus mechanism among automated agents [C ] // National Conference on Artificial Intelligence . c1991 , 91 : 173 - 178 .

SQUICCIARINI A C , XU H , ZHANG X . CoPE:enabling collabo-rative privacy management in online social networks [J ] . Journal of the American Society for Information Science＆Technology ， 2011 , 62 ( 3 ): 521 - 534 .

HU H , AHN G J , JORGENSEN J . Multiparty access control for online social networks:model and mechanisms [J ] . IEEE Transac-tions on Knowledge＆Data Engineering ， 2013 , 25 ( 7 ): 1614 - 1627 .

HU H , AHN G J , ZHAO Z , et al . Game theoretic analysis of multi-party access control in online social networks [C ] // ACM Sympo-sium on Access Control Models and Technologies . c2014 : 93 - 102 .

XIAO Q , TAN K L . Peer-aware collaborative access control in social networks [C ] // International Conference on Collaborative Computing:Networking,Applications and Worksharing . c2012 : 30 - 39 .

MEHREGAN P , FONG P W L . Policy negotiation for co-owned resources in relationship-based access control [C ] // ACM on Sympo-sium on Access Control Models and Technologies . c2016 : 125 - 136 .

ILIA P , POLAKIS I , ATHANASOPOULOS E , et al . Face/off:preventing privacy leakage from photos in social networks [C ] // The 22nd ACM Sigsac Conference on Computer and Communications Security . c2015 : 781 - 792 .

ZHANG C , ZHANG Z . A survey of recent advances in face detec-tion [EB/OL ] . http://research.microsoft.com/en-us/um/people/chaz-hang/publications/tr2010-66_ChaZhang.pdf. http://research.microsoft.com/en-us/um/people/chaz-hang/publications/tr2010-66_ChaZhang.pdf.

包义保 , 殷丽华 , 方滨兴 , 等 . 基于良基语义的安全策略表达与验证方法 [J ] . 软件学报 , 2012 , 23 ( 4 ): 912 - 927 .

BAO Y B , YIN L H , FANG B X , et al . Approach of security policy expression and verification based on well-founded semantic [J ] . Journal of Software , 2012 23 ( 4 ): 912 - 927 .

包义保 , 殷丽华 , 方滨兴 , 等 . 动态安全策略逻辑语言及安全属性验证问题的研究 [J ] . 计算机研究与发展 , 2010 , 50 ( 5 ): 932 - 941 .

BAO Y B , YIN L H , FANG B X , et al . Logic-based dynamical security policy language and verification [J ] . Journal of Computer Research＆Development , 2013 , 50 ( 5 ): 932 - 941 .

BONATTI P , SHAHMEHRI N , DUMA C , et al . Rule-based policy specification:state of the art and future work [EB/OL ] . http://www.macs.hw.ac.uk/bisel/rewerse/deliverables/i2-d1.pdf. http://www.macs.hw.ac.uk/bisel/rewerse/deliverables/i2-d1.pdf. .

JAKOB M , MOLER Z , PECHOUCEK M , et al . Intelligent con-tent-based privacy assistant for facebook [C ] // The IEEE/WIC/ACM International Conferences on Web Intelligence and Intelligent Agent Technology . c2011 : 499 - 500 .

RATHORE N C , TRIPATHY S . Topology management in ad hoc networks [A ] . Collaborative access control model for online social networks [C ] // ICDCIT . c2016 .

LIFSCHITZ V . Answer set programming and plan generation [J ] . Collaborative access control model for online social networks [C ] // Artificial Intelligence , 2002 , 138 ( 1 ): 39 - 54 .

LIFSCHITZ V . Answer set planning [C ] // International Conference on Logic Programming and Nonmonotonic Reasoning . c1999 : 373 - 374 .

Views

3152

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Multi-query based key node mining algorithm for social networks

Evolutionary game model of information management mechanism for public opinion governance

Social network user geolocating method based on weighted least squares

Survey of community privacy in social network

Research on cross-domain access control technology

Related Author

Wei WANG

Runxuan Liu

Jiayang Wei

Junheng HUANG

Tengwei ZHU

Guodong XIN

Shuting LIU

Yinghua MA

Related Institution

Institute of Cyber Science and Technology, Shanghai Jiao Tong University

Shanghai Municipal Key Lab of Integrated Management Technology for Information Security

Key Laboratory of Cyberspace Situation Awareness of Henan Province

State Key Laboratory of Mathematical Engineering and Advanced Computing

School of Cyber Science and Engineering, Zhengzhou University

⁰