Privacy in online social networks: Software agents and beyond Bettina Berendt Dept. Computer Science...

Privacyin online social networks:

Software agents and beyond

Bettina BerendtDept. Computer Science

KU Leuvenhttp://people.cs.kuleuven.be/~bettina.berendt/

Who am I ?

Privacy,Discrimination

You can sell your privacy,

but you can”t buy it back.

Meet Kris (1)

• Kris weighs 120 kilos.

• Kris wants to lead a “normal online life”.

Meet Kris (2)

Does Kris want others to know about his/her weight?

a)In an online dating site?

1.Kris wants to buy a pair of trousers.

•Does Kris want the salesperson to know about his/her weight?

•(analogously: diet plan / doctor)

2.The shop/doctor wants to sell patients information to health insurance companies.

•Does Kris want this?

a)The insurance company asks a premium for risk factors.

b)The insurance company cannot act on weight information.

Privacy is about ...

Confidentiality.

Context.

Confidentiality? Information – value!

Confidentiality? Purpose specification, notification … control!

Knowledge? Consequences!

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (2)

Confidentiality.

Context.

Meet Kris (3)

3. Kris has a traffic accident and is unconscious. Normally, the paramedics come with a stretcher that can carry up to 100 kilos. Time loss could be deadly.

• Would Kris want the doctor to inform the paramedics of his/her weight?

4. Kris wants to join / open a group on the SNS, the HeavyweightDaters.

• Does Kris want others to know about his/her weight?

5. Kris” teenage child Kim is (a) also overweight and (b) on Facebook.

• What advice does Kris give to Kim?

Privacy is about … (contd.)

Control? Trust! (and Consequences)

Hiding? Identity-building, which includes strategic revelations!

Meet Kris (3)

Kris and metadata

Would Kris be relieved to hear that the <insert your favourite secret service name> saves only metadata?

“They know that you called the suicide help line from the Golden Gate Bridge,

but they don”t know what was said.”

A multi-faceted approach

Lawallow, forbid, require, ...

Technologyencryption, access control,

Awarenessof problems, solutions,„what“s going on“, ...

Meet SPION

Tammy SchellensMartin Valcke

Ellen Vanderhoven

Ero Balsa Seda GürsesClaudia Diaz Bart Preneel

Alessandro AcquistiFred Stutzman

Jos DumortierEva Lievens

Brendan Van Alsenoy

Bettina BerendtBo GaoThomas Peetz

Dave ClarkeFrank Piessens

Rula Sayaf

Bram LievensJo Pierson

Ralf De Wolf

PET approaches (in SPION and elsewhere)

Feedback & awareness

Access control

Crypto-graphy

Access control

Crypto-graphy

Access control

Crypto-graphy

SPION PETs

• Access control: Facebook and beyond• Access control and information flow: FlowFox• Cryptography: Scramble• Feedback & awareness: FreeBu

Feedback & awareness:a systems view

Bettina BerendtDept. Computer Science

KU Leuvenhttp://people.cs.kuleuven.be/~bettina.berendt/

Established wisdoms …

“Overdisclosure“ privacy problems

Tools (technological and otherwise) privacy solutions

Evaluation validation of tools

Tool types à la SPION

• Confidentiality

• Control

• Awareness of ...– „I am being tracked.“– „which audiences do I have (whom I could

give access)?“ e.g., FreeBu – „when I am thinking too small about this“

A bigger picture

Environment- technology, society

Mental schema- privacy, p. problems

Behaviour- disclosure, evaluation

A bigger picture

Environment- technology, society

Mental schema- privacy, p. problems

Behaviour- disclosure, evaluation

Society, technology interpersonal boundaries disclosure

Disclosure disclosure (over)evaluation

BUT:Evaluating something/someone along different dimensionscan lead to worse judgementsand less satisfying decisions

Evaluation disclosure E

Evaluation privacy definitionsE

[Moreno et al., 2009]

Def. of “appropriate”; Privacy is

social privacyand some chilled overdisclosure(as opposed to

instrumental privacy)

& technology

Evaluation privacy definitionsE

Slashdot article on[Jentzsch, Preibusch & Harasser, 2012]

Privacy is an individually owned and

tradeable good(as opposed to

a fundamental right or a social good)

Please argue with me about

• Let us not divide and conquer ourselves:– The standard (scientific ?!) distribution of work can be

a dangerous self-blinding and continued delegation of responsibility when it comes to problems like privacy.

– (Being forced to) being responsible is not only bad, but also part and parcel of being a human & a citizen.

• We need awareness (tools), but we also need to build– true private spaces– true public spaces

• “Privacy is not only about clicking Facebook.“

This talk was inspired by many …

Intro quote (“I asked the audience not to tweet or blog while I was talking. Not out of respect for me, but out of respect for themselves.“):

• Lanier, J. (2010). You are Not a Gadget. A Manifesto. New York: Knopf. http://www.jaronlanier.com/gadgetwebresources.html

P.9: • Turkle, S. (2010). Alone Together. Why we Expect More from Technology

and Less from Each Other. Basic Books. http://alonetogetherbook.com/ • Altman, I. (1976). Privacy: A conceptual analysis. Environment and

Behaviour, 8(1), 7-29. P. 10: • Illouz, E. (2012). Why Love Hurts. Cambridge: Polity Press. – especially her

reading of • Wilson, T.D. & Schooler, J.W. (1991). Thinking too much: Introspection can

reduce the quality of preferences and decisions. Journal of Personality and Social Psychology, 60(2), 181-192.

• Ofir, C. & Simonson, I (2001). In search of negative customer feedback: The effect of expecting to evaluate on satisfaction and evaluation. Journal of Marketing Research, 38(2), 170-182.

Specific cited sources(these are examples of wider research areas)

P. 12:• Moreno MA, Vanderstoep A, Parks MR, Zimmerman FJ, Kurth A,

and Christakis DA. Reducing at-risk adolescents' display of risk behavior on a social networking web site: a randomized controlled pilot intervention trial. Arch Pediatr Adolesc Med, 163(1): 35-41, 2009.

P. 13:• Nicola Jentzsch, Sören Preibusch, Andreas Harasser. Study on

monetising privacy. An economic model for pricing personal information. European Network and information Security Agency (ENISA). Deliverable, February 2012. http://www.enisa.europa.eu/activities/identity-and-trust/library/deliverables/monetising-privacy

Privacy in online social networks: Software agents and beyond Bettina Berendt Dept. Computer Science...

Documents

1 1 Sailing the Corpus Sea: Tools for Visual Discovery of Stories in Blogs and News Bettina Berendt berendt

1 Bettina Berendt Humboldt University Berlin, Germany – Social-media blog tagging: Metadata or “just more content” ? OR: How do normal people

1 Evaluation for Web Mining Applications Bettina Berendt Humboldt University Berlin Ernestina Menasalvas Universidad Politécnica de Madrid Myra Spiliopoulou

Data mining, interactive semantic structuring, and collaboration: A diversity-aware method for sense-making in search Mathias Verbeke, Bettina Berendt,

1 Berendt: Advanced databases, 1ste semester 2010/2011, berendt/teaching/ 1 Advanced databases – The Semantic Web (1) Bettina

1 1 Bettina Berendt Humboldt-Universität zu Berlin – * mit vielen Ko-AutorInnen ** mit Roberto Navigli, Università “La Sapienza”, Roma,

1 Berendt: Advanced databases, 1st semester 2011/2012, berendt/teaching/ 1 Advanced databases – The Semantic Web Bettina Berendt

1 Berendt: Advanced databases, first semester 2011, bettina.berendt/teaching 1 Advanced databases – Inferring new knowledge

Web Science What? Why? Really? Panel at WI-IAT 2009 Milan, 17-09-2009, 13.45-14.30 Chair: Bettina Berendt (K.U. Leuven)

1 Datenschutzbewusstsein Bettina Berendt 9.7.2012

Bettina Berendt KU Leuven. Interdisciplinary Workshop on Data Privacy 2015, Maynooth, 28/09/ 2015 TOMORROW'S AGENTS, TOMORROW'S SPIES: ON TEACHING PRIVACY

1 Berendt: Knowledge and the Web, 2014, berendt/teaching 1 Knowledge and the Web – Schema, instance and ontology matching Bettina

1 Semantic Web Usage Mining – Overview and Case Studies – Bettina Berendt Humboldt University Berlin Institute of Information Systems berendt

Presented by Bettina Berendt, K.U. Leuven

1 E-Privacy im E-Commerce: Privacy-Präferenzen vs. tatsächliches Verhalten Bettina Berendt Humboldt-Universität zu Berlin, Institut für Wirtschaftsinformatik

Gegevensbanken 2012 Fundamenten van geheugen; Bestandsorganisatie; Hashing Bettina Berendt bettina.berendt

1 Web Usage Mining Modelling: frequent-pattern mining I (sequence mining with WUM), classification and clustering) Prof. Dr. Bettina Berendt Humboldt Univ

1 Bettina Berendt Web Mining 1. Ein Überblick 2. Analyse von Nutzer- und Kundenverhalten: Zur Rolle von Distributionsstrategien und demographischen

1 You are a document too: Web mining and IR for next-generation information literacy Bettina Berendt K.U. Leuven, Belgium

Opinion mining, sentiment analysis, and beyond Bettina Berendt Department of Computer Science KU Leuven, Belgium bettina.berendt