Community Detection for Access-Control Decisions: Analysing the Role of Homophily and Information Diffusion in Online Social Networks

• Published in: arXiv.org
• Main Authors: Diaz Ferreyra, Nicolas E, Hecking, Tobias, Aïmeur, Esma, Heisel, Maritta, H Ulrich Hoppe
• Format: Paper Journal Article
• Language: English
• Published: Ithaca Cornell University Library, arXiv.org 07.06.2021
• Subjects: Access control; Algorithms; Computer Science - Computers and Society; Computer Science - Social and Information Networks; Decision analysis; Information dissemination; Model testing; Privacy; Social networks; User requirements
• ISSN: 2331-8422
• DOI: 10.48550/arxiv.2104.09137

Access-Control Lists (ACLs) (a.k.a. friend lists) are one of the most important privacy features of Online Social Networks (OSNs) as they allow users to restrict the audience of their publications. Nevertheless, creating and maintaining custom ACLs can introduce a high cognitive burden on average OSNs users since it normally requires assessing the trustworthiness of a large number of contacts. In principle, community detection algorithms can be leveraged to support the generation of ACLs by mapping a set of examples (i.e. contacts labelled as untrusted) to the emerging communities inside the user's ego-network. However, unlike users' access-control preferences, traditional community-detection algorithms do not take the homophily characteristics of such communities into account (i.e. attributes shared among members). Consequently, this strategy may lead to inaccurate ACL configurations and privacy breaches under certain homophily scenarios. This work investigates the use of community-detection algorithms for the automatic generation of ACLs in OSNs. Particularly, it analyses the performance of the aforementioned approach under different homophily conditions through a simulation model. Furthermore, since private information may reach the scope of untrusted recipients through the re-sharing affordances of OSNs, information diffusion processes are also modelled and taken explicitly into account. Altogether, the removal of gatekeeper nodes is further explored as a strategy to counteract unwanted data dissemination.