Privacy in online social networks: Software agents and beyond

Aug 08, 2014

630 likes | 733 Views

Privacy in online social networks: Software agents and beyond. Bettina Berendt Dept. Computer Science KU Leuven http://people.cs.kuleuven.be/~bettina.berendt/. Who am I ?. Privacy, Discrimination. You can sell your privacy, but you can”t buy it back. ?. Meet Kris (1).

marcos

Download Presentation

Privacy in online social networks: Software agents and beyond

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

Privacyin online social networks:Software agents and beyond Bettina Berendt Dept. Computer Science KU Leuven http://people.cs.kuleuven.be/~bettina.berendt/
Who am I ? Privacy, Discrimination
You can sell your privacy, but you can”t buy it back.
?
Meet Kris (1) • Kris weighs 120 kilos. • Kris wants to lead a “normal online life”.
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge? Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge?Consequences!
Meet Kris (2) Does Kris want others to know about his/her weight? • In an online dating site? • Kris wants to buy a pair of trousers. • Does Kris want the salesperson to know about his/her weight? • (analogously: diet plan / doctor) • The shop/doctor wants to sell patients information to health insurance companies. • Does Kris want this? • The insurance company asks a premium for risk factors. • The insurance company cannot act on weight information. Privacy is about ... Confidentiality. Context. Confidentiality?Information – value! Confidentiality?Purpose specification, notification … control! Knowledge?Consequences! …
Meet Kris (3) • Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly. • Would Kris want the doctor to inform the paramedics of his/her weight? • Kris wants to join / open a group on the SNS, the HeavyweightDaters. • Does Kris want others to know about his/her weight? • Kris” teenage child Kim is (a) also overweight and (b) on Facebook. • What advice does Kris give to Kim? Privacy is about … (contd.) Control?Trust! (and Consequences) Hiding?Identity-building, which includes strategic revelations! …
Meet Kris (3) • Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly. • Would Kris want the doctor to inform the paramedics of his/her weight? • Kris wants to join / open a group on the SNS, the HeavyweightDaters. • Does Kris want others to know about his/her weight? • Kris” teenage child Kim is (a) also overweight and (b) on Facebook. • What advice does Kris give to Kim? Privacy is about … (contd.) Control?Trust! (and Consequences) Hiding?Identity-building, which includes strategic revelations! …
Meet Kris (3) • Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly. • Would Kris want the doctor to inform the paramedics of his/her weight? • Kris wants to join / open a group on the SNS, the HeavyweightDaters. • Does Kris want others to know about his/her weight? • Kris” teenage child Kim is (a) also overweight and (b) on Facebook. • What advice does Kris give to Kim? Privacy is about … (contd.) Control?Trust! (and Consequences) Hiding?Identity-building, which includes strategic revelations! …
Meet Kris (3) • Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly. • Would Kris want the doctor to inform the paramedics of his/her weight? • Kris wants to join / open a group on the SNS, the HeavyweightDaters. • Does Kris want others to know about his/her weight? • Kris” teenage child Kim is (a) also overweight and (b) on Facebook. • What advice does Kris give to Kim? Privacy is about … (contd.) Control?Trust! (and Consequences) Hiding?Identity-building, which includes strategic revelations! …
Meet Kris (3) • Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly. • Would Kris want the doctor to inform the paramedics of his/her weight? • Kris wants to join / open a group on the SNS, the HeavyweightDaters. • Does Kris want others to know about his/her weight? • Kris” teenage child Kim is (a) also overweight and (b) on Facebook. • What advice does Kris give to Kim? Privacy is about … (contd.) Control?Trust! (and Consequences) Hiding?Identity-building, which includes strategic revelations! …
Meet Kris (3) • Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly. • Would Kris want the doctor to inform the paramedics of his/her weight? • Kris wants to join / open a group on the SNS, the HeavyweightDaters. • Does Kris want others to know about his/her weight? • Kris” teenage child Kim is (a) also overweight and (b) on Facebook. • What advice does Kris give to Kim? Privacy is about … (contd.) Control?Trust! (and Consequences) Hiding?Identity-building, which includes strategic revelations! …
Meet Kris (3) • Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly. • Would Kris want the doctor to inform the paramedics of his/her weight? • Kris wants to join / open a group on the SNS, the HeavyweightDaters. • Does Kris want others to know about his/her weight? • Kris” teenage child Kim is (a) also overweight and (b) on Facebook. • What advice does Kris give to Kim? Privacy is about … (contd.) Control?Trust! (and Consequences) Hiding?Identity-building, which includes strategic revelations! …
Meet Kris (3) • Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly. • Would Kris want the doctor to inform the paramedics of his/her weight? • Kris wants to join / open a group on the SNS, the HeavyweightDaters. • Does Kris want others to know about his/her weight? • Kris” teenage child Kim is (a) also overweight and (b) on Facebook. • What advice does Kris give to Kim? Privacy is about … (contd.) Control?Trust! (and Consequences) Hiding?Identity-building, which includes strategic revelations! …
Meet Kris (3) • Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly. • Would Kris want the doctor to inform the paramedics of his/her weight? • Kris wants to join / open a group on the SNS, the HeavyweightDaters. • Does Kris want others to know about his/her weight? • Kris” teenage child Kim is (a) also overweight and (b) on Facebook. • What advice does Kris give to Kim? Privacy is about … (contd.) Control?Trust! (and Consequences) Hiding?Identity-building, which includes strategic revelations! …
Meet Kris (3) • Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly. • Would Kris want the doctor to inform the paramedics of his/her weight? • Kris wants to join / open a group on the SNS, the HeavyweightDaters. • Does Kris want others to know about his/her weight? • Kris” teenage child Kim is (a) also overweight and (b) on Facebook. • What advice does Kris give to Kim? Privacy is about … (contd.) Control?Trust! (and Consequences) Hiding?Identity-building, which includes strategic revelations! …
Meet Kris (3) • Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly. • Would Kris want the doctor to inform the paramedics of his/her weight? • Kris wants to join / open a group on the SNS, the HeavyweightDaters. • Does Kris want others to know about his/her weight? • Kris” teenage child Kim is (a) also overweight and (b) on Facebook. • What advice does Kris give to Kim? Privacy is about … (contd.) Control?Trust! (and Consequences) Hiding?Identity-building, which includes strategic revelations! …
Kris and metadata Would Kris be relieved to hear that the <insert your favourite secret service name> saves only metadata? “They know that you called the suicide help line from the Golden Gate Bridge, but they don”t know what was said.”
A multi-faceted approach Law allow, forbid, require, ...
A multi-faceted approach Technology encryption, access control, ... Law allow, forbid, require, ...
A multi-faceted approach Technology encryption, access control, ... Law allow, forbid, require, ... Awareness of problems, solutions, „what“s going on“, ...
A multi-faceted approach Technology encryption, access control, ... Law allow, forbid, require, ... Awareness of problems, solutions, „what“s going on“, ...
Technology encryption, access control, ... Law allow, forbid, require, ... Awareness of problems, solutions, „what“s going on“, ... A multi-faceted approach
Meet SPION
SPION team Ero Balsa Seda Gürses Claudia Diaz Bart Preneel Dave Clarke Frank Piessens Rula Sayaf Bram Lievens Jo Pierson Ralf De Wolf Bettina Berendt Bo Gao Thomas Peetz Jos Dumortier Eva Lievens Brendan Van Alsenoy Tammy Schellens Martin Valcke Ellen Vanderhoven Alessandro Acquisti Fred Stutzman
PET approaches (in SPION and elsewhere) Feedback & awareness
PET approaches (in SPION and elsewhere) Feedback & awareness
PET approaches (in SPION and elsewhere) Access control Feedback & awareness
PET approaches (in SPION and elsewhere) Access control Feedback & awareness
PET approaches (in SPION and elsewhere) Access control Crypto-graphy Feedback & awareness
PET approaches (in SPION and elsewhere) Access control Crypto-graphy
PET approaches (in SPION and elsewhere) Access control Crypto-graphy Feedback & awareness
SPION PETs • Access control: Facebook and beyond • Access control and information flow: FlowFox • Cryptography: Scramble • Feedback & awareness: FreeBu
Feedback & awareness:a systems view Bettina Berendt Dept. Computer Science KU Leuven http://people.cs.kuleuven.be/~bettina.berendt/
Established wisdoms …
“Overdisclosure“  privacy problems