Arcana

Enabling private posts on public microblog platforms

Anirudh Narasimman, Qiaozhi Wang, Fengjun Li, Dongwon Lee, Bo Luo

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Many popular online social networks, such as Twitter, Tumblr, and Sina Weibo, adopt too simple privacy models to satisfy users’ diverse needs for privacy protection. In platforms with no (i.e., completely open) or binary (i.e., “public” and “friends-only”) access control, users cannot control the dissemination boundary of the content they share. For instance, on Twitter, tweets in “public” accounts are accessible to everyone including search engines, while tweets in “protected” accounts are visible to all the followers. In this work, we present Arcana to enable fine-grained access control for social network content sharing. In particular, we target the Twitter platform and introduce the “private tweet” function, which allows users to disseminate particular tweets to designated group(s) of followers. Arcana employs Ciphertext-Policy Attribute-based Encryption (CP-ABE) to implement social circle detection and private tweet encryption so that access-controlled tweets are only readable by designated recipients. To be stealthy, Arcana further embeds the protected content as digital watermarks in image tweets. We have implemented the Arcana prototype as a Chrome browser plug-in, and demonstrated its flexibility and effectiveness. Different from existing approaches that require trusted third-parties or additional server/broker/mediator, Arcana is light-weight and completely transparent to Twitter – all the communications, including key distribution and private tweet dissemination, are exchanged as Twitter messages. Therefore, with small API modifications, Arcana could be easily ported to other online social networking platforms to support fine-grained access control.

Original languageEnglish (US)
Title of host publicationICT Systems Security and Privacy Protection - 34th IFIP TC 11 International Conference, SEC 2019, Proceedings
EditorsGurpreet Dhillon, André Zúquete, Fredrik Karlsson, Karin Hedström
PublisherSpringer New York LLC
Pages271-285
Number of pages15
ISBN (Print)9783030223113
DOIs
StatePublished - Jan 1 2019
Event34th IFIP TC 11 International Conference on Information Security and Privacy Protection, SEC 2019 - Lisbon, Portugal
Duration: Jun 25 2019Jun 27 2019

Publication series

NameIFIP Advances in Information and Communication Technology
Volume562
ISSN (Print)1868-4238

Conference

Conference34th IFIP TC 11 International Conference on Information Security and Privacy Protection, SEC 2019
CountryPortugal
CityLisbon
Period6/25/196/27/19

Fingerprint

Twitter
Access control
Dissemination
Encryption
Follower
Privacy
Communication
Prototype
Mediator
Social networks
Online social networks
Search engine
Broker
Social networking

All Science Journal Classification (ASJC) codes

  • Information Systems and Management

Cite this

Narasimman, A., Wang, Q., Li, F., Lee, D., & Luo, B. (2019). Arcana: Enabling private posts on public microblog platforms. In G. Dhillon, A. Zúquete, F. Karlsson, & K. Hedström (Eds.), ICT Systems Security and Privacy Protection - 34th IFIP TC 11 International Conference, SEC 2019, Proceedings (pp. 271-285). (IFIP Advances in Information and Communication Technology; Vol. 562). Springer New York LLC. https://doi.org/10.1007/978-3-030-22312-0_19
Narasimman, Anirudh ; Wang, Qiaozhi ; Li, Fengjun ; Lee, Dongwon ; Luo, Bo. / Arcana : Enabling private posts on public microblog platforms. ICT Systems Security and Privacy Protection - 34th IFIP TC 11 International Conference, SEC 2019, Proceedings. editor / Gurpreet Dhillon ; André Zúquete ; Fredrik Karlsson ; Karin Hedström. Springer New York LLC, 2019. pp. 271-285 (IFIP Advances in Information and Communication Technology).
@inproceedings{61272b1941bf4156b8e211c38bf115a7,
title = "Arcana: Enabling private posts on public microblog platforms",
abstract = "Many popular online social networks, such as Twitter, Tumblr, and Sina Weibo, adopt too simple privacy models to satisfy users’ diverse needs for privacy protection. In platforms with no (i.e., completely open) or binary (i.e., “public” and “friends-only”) access control, users cannot control the dissemination boundary of the content they share. For instance, on Twitter, tweets in “public” accounts are accessible to everyone including search engines, while tweets in “protected” accounts are visible to all the followers. In this work, we present Arcana to enable fine-grained access control for social network content sharing. In particular, we target the Twitter platform and introduce the “private tweet” function, which allows users to disseminate particular tweets to designated group(s) of followers. Arcana employs Ciphertext-Policy Attribute-based Encryption (CP-ABE) to implement social circle detection and private tweet encryption so that access-controlled tweets are only readable by designated recipients. To be stealthy, Arcana further embeds the protected content as digital watermarks in image tweets. We have implemented the Arcana prototype as a Chrome browser plug-in, and demonstrated its flexibility and effectiveness. Different from existing approaches that require trusted third-parties or additional server/broker/mediator, Arcana is light-weight and completely transparent to Twitter – all the communications, including key distribution and private tweet dissemination, are exchanged as Twitter messages. Therefore, with small API modifications, Arcana could be easily ported to other online social networking platforms to support fine-grained access control.",
author = "Anirudh Narasimman and Qiaozhi Wang and Fengjun Li and Dongwon Lee and Bo Luo",
year = "2019",
month = "1",
day = "1",
doi = "10.1007/978-3-030-22312-0_19",
language = "English (US)",
isbn = "9783030223113",
series = "IFIP Advances in Information and Communication Technology",
publisher = "Springer New York LLC",
pages = "271--285",
editor = "Gurpreet Dhillon and Andr{\'e} Z{\'u}quete and Fredrik Karlsson and Karin Hedstr{\"o}m",
booktitle = "ICT Systems Security and Privacy Protection - 34th IFIP TC 11 International Conference, SEC 2019, Proceedings",

}

Narasimman, A, Wang, Q, Li, F, Lee, D & Luo, B 2019, Arcana: Enabling private posts on public microblog platforms. in G Dhillon, A Zúquete, F Karlsson & K Hedström (eds), ICT Systems Security and Privacy Protection - 34th IFIP TC 11 International Conference, SEC 2019, Proceedings. IFIP Advances in Information and Communication Technology, vol. 562, Springer New York LLC, pp. 271-285, 34th IFIP TC 11 International Conference on Information Security and Privacy Protection, SEC 2019, Lisbon, Portugal, 6/25/19. https://doi.org/10.1007/978-3-030-22312-0_19

Arcana : Enabling private posts on public microblog platforms. / Narasimman, Anirudh; Wang, Qiaozhi; Li, Fengjun; Lee, Dongwon; Luo, Bo.

ICT Systems Security and Privacy Protection - 34th IFIP TC 11 International Conference, SEC 2019, Proceedings. ed. / Gurpreet Dhillon; André Zúquete; Fredrik Karlsson; Karin Hedström. Springer New York LLC, 2019. p. 271-285 (IFIP Advances in Information and Communication Technology; Vol. 562).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

TY - GEN

T1 - Arcana

T2 - Enabling private posts on public microblog platforms

AU - Narasimman, Anirudh

AU - Wang, Qiaozhi

AU - Li, Fengjun

AU - Lee, Dongwon

AU - Luo, Bo

PY - 2019/1/1

Y1 - 2019/1/1

N2 - Many popular online social networks, such as Twitter, Tumblr, and Sina Weibo, adopt too simple privacy models to satisfy users’ diverse needs for privacy protection. In platforms with no (i.e., completely open) or binary (i.e., “public” and “friends-only”) access control, users cannot control the dissemination boundary of the content they share. For instance, on Twitter, tweets in “public” accounts are accessible to everyone including search engines, while tweets in “protected” accounts are visible to all the followers. In this work, we present Arcana to enable fine-grained access control for social network content sharing. In particular, we target the Twitter platform and introduce the “private tweet” function, which allows users to disseminate particular tweets to designated group(s) of followers. Arcana employs Ciphertext-Policy Attribute-based Encryption (CP-ABE) to implement social circle detection and private tweet encryption so that access-controlled tweets are only readable by designated recipients. To be stealthy, Arcana further embeds the protected content as digital watermarks in image tweets. We have implemented the Arcana prototype as a Chrome browser plug-in, and demonstrated its flexibility and effectiveness. Different from existing approaches that require trusted third-parties or additional server/broker/mediator, Arcana is light-weight and completely transparent to Twitter – all the communications, including key distribution and private tweet dissemination, are exchanged as Twitter messages. Therefore, with small API modifications, Arcana could be easily ported to other online social networking platforms to support fine-grained access control.

AB - Many popular online social networks, such as Twitter, Tumblr, and Sina Weibo, adopt too simple privacy models to satisfy users’ diverse needs for privacy protection. In platforms with no (i.e., completely open) or binary (i.e., “public” and “friends-only”) access control, users cannot control the dissemination boundary of the content they share. For instance, on Twitter, tweets in “public” accounts are accessible to everyone including search engines, while tweets in “protected” accounts are visible to all the followers. In this work, we present Arcana to enable fine-grained access control for social network content sharing. In particular, we target the Twitter platform and introduce the “private tweet” function, which allows users to disseminate particular tweets to designated group(s) of followers. Arcana employs Ciphertext-Policy Attribute-based Encryption (CP-ABE) to implement social circle detection and private tweet encryption so that access-controlled tweets are only readable by designated recipients. To be stealthy, Arcana further embeds the protected content as digital watermarks in image tweets. We have implemented the Arcana prototype as a Chrome browser plug-in, and demonstrated its flexibility and effectiveness. Different from existing approaches that require trusted third-parties or additional server/broker/mediator, Arcana is light-weight and completely transparent to Twitter – all the communications, including key distribution and private tweet dissemination, are exchanged as Twitter messages. Therefore, with small API modifications, Arcana could be easily ported to other online social networking platforms to support fine-grained access control.

UR - http://www.scopus.com/inward/record.url?scp=85068221355&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85068221355&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-22312-0_19

DO - 10.1007/978-3-030-22312-0_19

M3 - Conference contribution

SN - 9783030223113

T3 - IFIP Advances in Information and Communication Technology

SP - 271

EP - 285

BT - ICT Systems Security and Privacy Protection - 34th IFIP TC 11 International Conference, SEC 2019, Proceedings

A2 - Dhillon, Gurpreet

A2 - Zúquete, André

A2 - Karlsson, Fredrik

A2 - Hedström, Karin

PB - Springer New York LLC

ER -

Narasimman A, Wang Q, Li F, Lee D, Luo B. Arcana: Enabling private posts on public microblog platforms. In Dhillon G, Zúquete A, Karlsson F, Hedström K, editors, ICT Systems Security and Privacy Protection - 34th IFIP TC 11 International Conference, SEC 2019, Proceedings. Springer New York LLC. 2019. p. 271-285. (IFIP Advances in Information and Communication Technology). https://doi.org/10.1007/978-3-030-22312-0_19