Information revelation and privacy in online social networks

ABSTRACT

Participation in social networking sites has dramatically increased in recent years. Services such as Friendster, Tribe, or the Facebook allow millions of individuals to create online profiles and share personal information with vast networks of friends - and, often, unknown numbers of strangers. In this paper we study patterns of information revelation in online social networks and their privacy implications. We analyze the online behavior of more than 4,000 Carnegie Mellon University students who have joined a popular social networking site catered to colleges. We evaluate the amount of information they disclose and study their usage of the site's privacy settings. We highlight potential attacks on various aspects of their privacy, and we show that only a minimal percentage of users changes the highly permeable privacy preferences.

REFERENCES

• 1: Alessandro Acquisti, Privacy in electronic commerce and the economics of immediate gratification, Proceedings of the 5th ACM conference on Electronic commerce, May 17-20, 2004, New York, NY, USA [doi>10.1145/988772.988777]
• 2: B. Anderson. Imagined Communities: Reflections on the Origin and Spread of Nationalism. Verso, London and New York, revised edition, 1991.
• 3: S. Arrison. Is Friendster the new TIA? TechCentralStation, January 7, 2004.
• 4: J. Black. The perils and promise of online schmoozing. BusinessWeek Online, February 20, 2004.
• 5: J. Brown. Six degrees to nowhere. Salon.com, September 21, 1998.
• 6: D. Cave. 16 to 25? Pentagon has your number, and more. The New York Times, June 24, 2005.
• 7: d. boyd. Reflections on friendster, trust and intimacy. In Intimate (Ubiquitous) Computing Workshop - Ubicomp 2003, October 12-15, Seattle, Washington, USA, 2003.
• 8: danah michele boyd, Friendster and publicly articulated social networking, CHI '04 extended abstracts on Human factors in computing systems, April 24-29, 2004, Vienna, Austria [doi>10.1145/985921.986043]
• 9: J. Donath , D. Boyd, Public Displays of Connection, BT Technology Journal, v.22 n.4, p.71-82, October 2004 [doi>10.1023/B:BTTJ.0000047585.06264.cc]
• 10: S. Gerstein. Intimacy and privacy. In F. D. Schoeman, editor, Philosophical Dimensions of Privacy: An Anthology. Cambridge University Press, Cambridge, UK, 1984.
• 11: M. Granovetter. The strength of weak ties. American Journal of Sociology, 78:1360--1380, 1973.
• 12: M. Granovetter. The strength of weak ties: A network theory revisited. Sociological Theory, 1:201--233, 1983.
• 13: R. Gross. Re-identifying facial images. Technical report, Carnegie Mellon University, Institute for Software Research International, 2005. In preparation.
• 14: R. Gross, J. Shi, and J. Cohn. Quo vadis face recognition? In Third Workshop on Empirical Evaluation Methods in Computer Vision, 2001.
• 15: K. Jump. A new kind of fame. The Columbian Missourian, September 1, 2005.
• 16: A. Leonard. You are who you know. Salon.com, June 15, 2004.
• 17: Anil K. Jain , Stan Z. Li, Handbook of Face Recognition, Springer-Verlag New York, Inc., Secaucus, NJ, 2005
• 18: H. Liu and P. Maes. Interestmap: Harvesting social network profiles for recommendations. In Beyond Personalization - IUI 2005, January 9, San Diego, California, USA, 2005.
• 19: Wendy E. Mackay, Triggers and barriers to customizing software, Proceedings of the SIGCHI conference on Human factors in computing systems: Reaching through technology, p.153-160, April 27-May 02, 1991, New Orleans, Louisiana, United States [doi>10.1145/108844.108867]
• 20: S. Milgram. The small world problem. Psychology Today, 6:62--67, 1967.
• 21: S. Milgram. The familiar stranger: An aspect of urban anonymity. In S. Milgram, J. Sabini, and M. Silver, editors, The Individual in a Social World: Essays and Experiments. Addison-Wesley, Reading, MA, 1977.
• 22: Kevin D. Mitnick , William L. Simon , William Simon, The Art of Deception: Controlling the Human Element of Security, John Wiley & Sons, Inc., New York, NY, 2002
• 23: A. Newitz. Defenses lacking at social network sites. SecurityFocus, December 31, 2003.
• 24: P. Jonathon Phillips , Patrick J. Flynn , Todd Scruggs , Kevin W. Bowyer , Jin Chang , Kevin Hoffman , Joe Marques , Jaesik Min , William Worek, Overview of the Face Recognition Grand Challenge, Proceedings of the 2005 IEEE Computer Society Conference on Computer Vision and Pattern Recognition (CVPR'05) - Volume 1, p.947-954, June 20-26, 2005 [doi>10.1109/CVPR.2005.268]
• 25: P. Samarati and L. Sweeney. Protecting privacy when disclosing information: k-anonymity and its enforcement through generalization and cell suppression. Technical report, SRI International, 1998.
• 26: I. Sege. Where everybody knows your name. Boston.com, April 27, 2005.
• 27: L. J. Strahilevitz. A social networks theory of privacy. The Law School, University of Chicago, John M. Olin Law & Economics Working Paper No. 230 (2D Series), December 2004.
• 28: Latanya Sweeney, k-anonymity: a model for protecting privacy, International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, v.10 n.5, p.557-570, October 2002 [doi>10.1142/S0218488502001648]
• 29: L. Sweeney. Uniqueness of simple demographics in the U.S. population. Technical report, Carnegie Mellon University, Laboratory for International Data Privacy, 2004.
• 30: The Facebook. Privacy policy. http://facebook.com/policy.php, August 2005.
• 31: University Planning. Carnegie Mellon Factbook 2005. Carnegie Mellon University, February 2005.
• 32: D. Watts. Six Degrees: The Science of a Connected Age. W.W.Norton & Company, 2003.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.1 Public Policy Issues
          Subjects: Privacy

General Terms:
Human Factors

Keywords:
information revelation, online privacy, social networking sites