Collateral Damage of Facebook Apps: Friends, Providers, and Privacy Interdependence

  • Iraklis Symeonidis
  • Fatemeh Shirazi
  • Gergely Biczók
  • Cristina Pérez-Solà
  • Bart Preneel
Conference paper

DOI: 10.1007/978-3-319-33630-5_14

Volume 471 of the book series IFIP Advances in Information and Communication Technology (IFIPAICT)
Cite this paper as:
Symeonidis I., Shirazi F., Biczók G., Pérez-Solà C., Preneel B. (2016) Collateral Damage of Facebook Apps: Friends, Providers, and Privacy Interdependence. In: Hoepman JH., Katzenbeisser S. (eds) ICT Systems Security and Privacy Protection. SEC 2016. IFIP Advances in Information and Communication Technology, vol 471. Springer, Cham

Abstract

Third-party apps enable a personalized experience on social networking platforms; however, they give rise to privacy interdependence issues. Apps installed by a user’s friends can collect and potentially misuse her personal data inflicting collateral damage on the user while leaving her without proper means of control. In this paper, we present a multi-faceted study on the collateral information collection of apps in social networks. We conduct a user survey and show that Facebook users are concerned about this issue and the lack of mechanisms to control it. Based on real data, we compute the likelihood of collateral information collection affecting users; we show that the probability is significant and depends on both the friendship network and the popularity of the app. We also show its significance by computing the proportion of exposed user attributes including the case of profiling, when several apps are offered by the same provider. Finally, we propose a privacy dashboard concept enabling users to control the collateral damage.

Copyright information

© IFIP International Federation for Information Processing 2016

Authors and Affiliations

  • Iraklis Symeonidis
    • 1
  • Fatemeh Shirazi
    • 1
  • Gergely Biczók
    • 2
  • Cristina Pérez-Solà
    • 1
    • 3
  • Bart Preneel
    • 1
  1. 1.ESAT/COSIC and iMindsKU LeuvenLeuvenBelgium
  2. 2.MTA-BME Future Internet RGBudapest University of Technology and EconomicsBudapestHungary
  3. 3.dEICUniversitat Autònoma de BarcelonaBarcelonaSpain