Enforcing access control in Web-based social networks
Top Cited Papers
Open Access
- 1 October 2009
- journal article
- research article
- Published by Association for Computing Machinery (ACM) in ACM Transactions on Information and System Security
- Vol. 13 (1) , 1-38
Abstract
In this article, we propose an access control mechanism for Web-based social networks, which adopts a rule-based approach for specifying access policies on the resources owned by network participants, and where authorized users are denoted in terms of the type, depth, and trust level of the relationships existing between nodes in the network. Different from traditional access control systems, our mechanism makes use of a semidecentralized architecture, where access control enforcement is carried out client-side. Access to a resource is granted when the requestor is able to demonstrate being authorized to do that by providing a proof. In the article, besides illustrating the main notions on which our access control model relies, we present all the protocols underlying our system and a performance study of the implemented prototype.Keywords
Funding Information
- Ministero dell'Istruzione, dell'Università e della Ricerca (PRIN-2007F9437X_004)
This publication has 17 references indexed in Scilit:
- Access control and privacy in web‐based social networksInternational Journal of Web Information Systems, 2008
- N3Logic: A logical framework for the World Wide WebTheory and Practice of Logic Programming, 2008
- A survey of trust and reputation systems for online service provisionDecision Support Systems, 2007
- A trust based approach for protecting user data in social networksProceedings of the 2007 conference of the center for advanced studies on Collaborative research - CASCON '07, 2007
- Inferring binary trust relationships in Web-based social networksACM Transactions on Internet Technology, 2006
- D-FOAF: Distributed Identity Management with Access Rights Delegation2006
- Rule-Based Access Control for Social Networks2006
- PeerTrust: Supporting Reputation-Based Trust for Peer-to-Peer Electronic CommunitiesIEEE Transactions on Knowledge and Data Engineering, 2004
- The Eigentrust algorithm for reputation management in P2P networks2003
- How to share a secretCommunications of the ACM, 1979