The 8th ACM Conference on Data and Application Security and Privacy (CODASPY) took place between March 19 – 21, 2018. Tempe, Arizona. Together with Christine Schuppler and Stefanie Rinderle-Ma, we published a poster on “Privacy-aware Data Assessment of Online Social Network Registration Processes”.
Privacy-aware Data Assessment of Online Social Network Registration Processes
Abstract: Privacy and security research has been very active concerning online social networks (OSN) as a vast amount of personal information is used and published (by users) within OSNs. However, most people do not pay attention on what personal information they provide during registration. Depending on what information is provided in (public) OSN profiles, that data might be misused by attackers e.g., for cross-site profile cloning. This paper assesses data provided by the user during the registration of OSNs. Therefore, it is investigated how OSN registration processes are typically modeled, which information is needed to create a profile in OSNs and which attack scenarios can occur based on the provided data. The results contribute to the understanding of OSN registration process design as well as requested data and to replicate and reuse processes for further privacy and security investigations.
