%0 Conference Proceedings %T LAMP - Label-Based Access-Control for More Privacy in Online Social Networks %+ Universitá degli Studi dell’Insubria = University of Insubria [Varese] (Uninsubria) %A Bahri, Leila %A Carminati, Barbara %A Ferrari, Elena %A Lucia, William %Z Part 4: Access Control and Data Protection %< avec comité de lecture %( Lecture Notes in Computer Science %B 10th IFIP International Conference on Information Security Theory and Practice (WISTP) %C Heraklion, Greece %Y Sara Foresti %Y Javier Lopez %I Springer International Publishing %3 Information Security Theory and Practice %V LNCS-9895 %P 171-186 %8 2016-09-26 %D 2016 %R 10.1007/978-3-319-45931-8_11 %Z Computer Science [cs]Conference papers %X Access control in Online Social Networks (OSNs) is generally approached with a relationship-based model. This limits the options in expressing privacy preferences to only the types of relationships users establish in the OSN. Moreover, current proposals do not address the privacy of dependent information types, such as comments or likes, at their atomic levels of ownership. Rather, the privacy of these data elements is holistically dependent on the aggregate object they belong to. To overcome this, we propose LAMP, a model that deploys fine grained label-based access control for information sharing in OSNs. Users in LAMP assign customized labels to their friends and to all types of their information; whereas access requests are evaluated by security properties carefully designed to establish orders between requestor’s and information’s labels. We prove the correctness of the suggested model, and we perform performance experiments based on different access scenarios simulated on a real OSN graph. We also performed a preliminary usability study that compared LAMP to Facebook privacy settings. %G English %Z TC 11 %Z WG 11.2 %2 https://inria.hal.science/hal-01639607/document %2 https://inria.hal.science/hal-01639607/file/421627_1_En_11_Chapter.pdf %L hal-01639607 %U https://inria.hal.science/hal-01639607 %~ IFIP-LNCS %~ IFIP %~ IFIP-TC %~ IFIP-TC11 %~ IFIP-WISTP %~ IFIP-WG11-2 %~ IFIP-LNCS-9895