Research On Privacy Protecting Policies And Access Control Rules In Social Network Information Sharing

Online Social Networks (OSNs) are one of the major technological phenomena of the Web 2.0 and OSNs provide excellent arenas of self-display for world-wide users. At the same time, the blowout development of OSNs brought about many problems like privacy issues. Even though content sharing is one of the most important services provided by OSNs, the current social network operators don’t provide adequate fine-grained privacy protection mechanism to control the information flow. Traditional access control models such as RBAC model and BLP model can’t be applied in the dynamic and open environment of social network directly. Aiming at these problems in social networks like sharing data security and privacy protection, this dissertation proposes an improved Group and Attribute Based Access Control (IG-ABAC) model, the main research contents are as follows:First, this dissertation introduces the concept of social network privacy disclosure and the current researches to solve problems of social network privacy protection and their main issues. Baed on these, we analyse features of ABAC model which is different from traditional models like RBAC model and combine the characteristic of OSNs, then we explain the reason and advantages of using ABAC model.Secondly, this dissertation proposes an Extended Attribute Based Access Control ABAC model (IG-ABAC) which is applied in environment of social networks based on ABAC model. Formal policy language is used to describe this model, and XACML language is used to implement its system framework. IG-ABAC model puts forward the concept of attributes management based on the requirements of social network fine-grained access control settings for the first time and extends the four tuple in ABAC model into five tuple which is more suitable for OSNs. The system framework of IG-ABAC model has acquired a corresponding expansion. Accordingly, we define access control policies of IG-ABAC model. Finally, we proved that IG-ABAC model is secure when controlling information flow.Finally, this dissertation uses XACML policy language and JAVA to do a series of simulation experiments in computer in order to verify the applicability of IG-ABAC model. Experimental results show that, IG-ABAC model has a slight decrease in efficiency compared with ABAC model, but has a promising usability and scalability. In addition, we illustrate the practical application of IG-ABAC model through a practical scenario.