A Smart Wizard System Suitable for Use With Internet Mobile Devices to Adjust Personal Information Privacy Settings

The privacy of personal information is an important issue affecting the confidence of internet users. The widespread adoption of online social networks and access to these platforms using mobile devices has encouraged developers to make the systems and interfaces acceptable to users who seek privacy. The aim of this study is to test a wizard that allows users to control the sharing of personal information with others. We also assess the concerns of users in terms of such sharing such as whether to hide personal data in current online social network accounts. Survey results showed the wizard worked very well and that females concealed more personal information than did males. In addition, most users who were concerned about misuse of personal information hid those items. The results can be used to upgrade current privacy systems or to design new systems that work on mobile internet devices. The system can also be used to save time when setting personal privacy settings and makes users more aware of items that will be shared with others.Comment: 16 pages, 8 figures, 2 table

A Value Focused Thinking (VFT) Analysis to Understanding Users’ Privacy and Security Dynamics in Social Networking Services

The rate of growth of Social Networking Services (SNS) has significant implications for computer and cyber-crime management. In exploring the human side of security, studies have shown that any security response requires more than technical solutions. This is even more so as users are often seen as the key point of vulnerabilities for computer systems including SNS. This study seeks to explore what are the important values in understanding measures to maximize end-user security and privacy concerns in SNS settings. The study applies the Value-focused Thinking (VFT) methodology to determine the users’ values and objectives, with an initial focus on a developing context. With online users in developing countries surpassing more developed regions, it is imperative that focused attention to this domain is granted. The study found that privacy, confidentiality, integrity of SNS, security controls, awareness campaigns, corporate social responsibility and personal responsibility are fundamental values in maximizing user security and privacy conditions. Corporate social responsibility was one of the findings from this research which underlined the important role of businesses including the service providers in maintaining the integrity of SNS environment

Exploring responsible applications of Synthetic Data to advance Online Safety Research and Development

The use of synthetic data provides an opportunity to accelerate online safety research and development efforts while showing potential for bias mitigation, facilitating data storage and sharing, preserving privacy and reducing exposure to harmful content. However, the responsible use of synthetic data requires caution regarding anticipated risks and challenges. This short report explores the potential applications of synthetic data to the domain of online safety, and addresses the ethical challenges that effective use of the technology may present

The Impact of Mindfulness on Non-Malicious Spillage within Images on Social Networking Sites

Insider threat by employees in organizations is a problematic issue in today’s fast-paced, internet-driven society. Gone are the days when securing the perimeter of one’s network protected their business. Security threats are now mobile, and employees have the ability to share sensitive business data with hundreds of people instantaneously from mobile devices. While prior research has addressed social networking topics such as trust in relation to information systems, the use of social networking sites, social networking security, and social networking sharing, there is a lack of research in the mindfulness of users who spill sensitive data contained within images posted on social networking sites (SNS). The author seeks to provide an understanding of how non-malicious spillage through images relates to the mindfulness of employees, who are also deemed insiders. Specifically, it explores the relationships between the following variables: mindfulness, proprietary information spillage, and spillage of personally identifiable information (PII). A quasi-experimental study was designed, which was correlational in nature. Individuals were the unit of analysis. A sample population of business managers with SNS accounts were studied. A series of video vignettes were used to measure mindfulness. Surveys were used as a tool to collect and analyze data. There was a positive correlation between non-malicious spillage of sensitive business, both personally identifiable information and proprietary data, and a lack of mindfulness

Towards assessing information privacy in microblogging online social networks. The IPAM framework

Les xarxes socials en línia incorporen diferents formes de comunicació interactiva com serveis de microblogs, compartició de fitxers multimèdia o xarxes de contactes professionals. En els últims anys han augmentat els escàndols públics en relació amb pràctiques qüestionables de la indústria de les xarxes socials pel que fa a la privacitat. Així, doncs, cal una avaluació efectiva i eficient del nivell de privacitat en les xarxes socials en línia. El focus de la present tesi és la construcció d'un esquema (IPAM) per a identificar i avaluar el nivell de privacitat proporcionat per les xarxes socials en línia, en particular per als serveis de microblogs. L'objectiu d'IPAM és ajudar els usuaris a identificar els riscos relacionats amb les seves dades. L'esquema també permet comparar el nivell de protecció de la privacitat entre diferents sistemes analitzats, de manera que pugui ser també utilitzat per proveïdors de servei i desenvolupadors per a provar i avaluar els seus sistemes i si les tècniques de privacitat usades són eficaces i suficients.Las redes sociales en línea incorporan diferentes formas de comunicación interactiva como servicios de microblogueo, compartición de ficheros multimedia o redes de contactos profesionales. En los últimos años han aumentado los escándalos públicos relacionados con prácticas cuestionables de la industria de las redes sociales en relación con la privacidad. Así pues, es necesaria una evaluación efectiva y eficiente del nivel de privacidad en las redes sociales en línea. El foco de la presente tesis es la construcción de un esquema (IPAM) para identificar y evaluar el nivel de privacidad proporcionado por las redes sociales en línea, en particular para los servicios de microblogueo. El objetivo de IPAM es ayudar a los usuarios a identificar los riesgos relacionados con sus datos. El esquema también permite comparar el nivel de protección de la privacidad entre diferentes sistemas analizados, de modo que pueda ser también utilizado por proveedores de servicio y desarrolladores para probar y evaluar sus sistemas y si las técnicas de privacidad usadas son eficaces y suficientes.Online social networks (OSNs) incorporate different forms of interactive communication, including microblogging services, multimedia sharing and business networking, among others. In recent years there has been an increase in the number of privacy-related public scandals involving questionable data handling practices in OSNs. This situation calls for an effective and efficient evaluation of the privacy level provided by such services. In this thesis, we take initial steps towards developing an information privacy assessment framework (IPAM framework) to compute privacy scores for online social networks in general, and microblogging OSNs in particular. The aim of the proposed framework is to help users identify personal data-related risks and how their privacy is protected when using one OSN or another. The IPAM framework also allows for a comparison between different systems' privacy protection level. This gives system providers, not only an idea of how they are positioned in the market vis-à-vis their competitors, but also recommendations on how to enhance their services

Vulnerability in online social network profiles. A Framework for Measuring Consequences of Information Disclosure in Online Social Networks.

The increase in online social network (OSN) usage has led to personal details known as attributes being readily displayed in OSN profiles. This can lead to the profile owners being vulnerable to privacy and social engineering attacks which include identity theft, stalking and re identification by linking. Due to a need to address privacy in OSNs, this thesis presents a framework to quantify the vulnerability of a user¿s OSN profile. Vulnerability is defined as the likelihood that the personal details displayed on an OSN profile will spread due to the actions of the profile owner and their friends in regards to information disclosure. The vulnerability measure consists of three components. The individual vulnerability is calculated by allocating weights to profile attribute values disclosed and neighbourhood features which may contribute towards the personal vulnerability of the profile user. The relative vulnerability is the collective vulnerability of the profiles¿ friends. The absolute vulnerability is the overall profile vulnerability which considers the individual and relative vulnerabilities. The first part of the framework details a data retrieval approach to extract MySpace profile data to test the vulnerability algorithm using real cases. The profile structure presented significant extraction problems because of the dynamic nature of the OSN. Issues of the usability of a standard dataset including ethical concerns are discussed. Application of the vulnerability measure on extracted data emphasised how so called ¿private profiles¿ are not immune to vulnerability issues. This is because some profile details can still be displayed on private profiles. The second part of the framework presents the normalisation of the measure, in the context of a formal approach which includes the development of axioms and validation of the measure but with a larger dataset of profiles. The axioms highlight that changes in the presented list of profile attributes, and the attributes¿ weights in making the profile vulnerable, affect the individual vulnerability of a profile. iii Validation of the measure showed that vulnerability involving OSN profiles does occur and this provides a good basis for other researchers to build on the measure further. The novelty of this vulnerability measure is that it takes into account not just the attributes presented on each individual profile but features of the profiles¿ neighbourhood

A Framework to Enhance Privacy-Awareness in Mobile Web Systems

In the last decade, the use of online social network sites has dramatically increased and these sites have succeeded in attracting a large number of users. The social network site has become a daily tool people use to find out about the latest news and to share details of their personal information. Many people use Internet mobile devices to browse these sites. The widespread use of some technologies unnecessarily puts the privacy of users at risk, even when these users remain anonymous. This study examines the risks to privacy surrounding the misuse of users' personal information, such as maintaining trustworthy sites, as well as privacy issues associated with sharing personal information with others. This study also develops a framework to enhance privacy awareness in mobile Web systems. A privacy framework is proposed that incorporates suitability in the design and flexibility in the use to suit different types of Web mobile devices, and provides simple ways of adjusting and creating different privacy policies. This framework allows the user to create different levels of privacy settings and to better manage the exchange of personal information with other sites. The proposed conceptual model for this study is derived from a review of the literature and the current privacy models. It shows how online users are able to create different privacy policies and set different policies to access the data. It also explains how the centrality of personal information details in one server will limit the distribution of personal information over the Internet and will provide users with more authority to control the sharing of their information with other websites. The design of the proposed framework is derived from developing other privacy models and adding new ideas that enhance the security level of protecting the privacy of users' information. The study consists of five main tasks that include two different qualitative methodologies, programming two applications and testing the framework

Metodología de aprendizaje y generación de conocimiento mediante colaboración vía Internet : aplicación al Observatorio Astronómico Montegancedo

La Web 2.0 es un fenómeno de Internet caracterizado por webs más dinámicas y participativas. Actualmente, existen nuevas tendencias sociales que están provocando formas innovadoras de colaboración voluntaria y de aprendizaje en línea. La tesis doctoral se enmarca dentro del contexto de la Web 2.0 y del aprendizaje colaborativo a través de Internet, en concreto de los laboratorios remotos basados en experimentación real. Este trabajo se inicia con el objetivo de diseñar una metodología novedosa de creación de proyectos de colaboración y participación ciudadana orientados a la educación y basados en la experimentación real. Se trata de un nuevo enfoque para crear aplicaciones web abiertas a la sociedad que promuevan el aprendizaje informal, el constructivismo y la generación de conocimiento a través de sistemas colaborativos, auto-organizados y meritocráticos. El trabajo realizado en esta tesis se centra en el diseño y desarrollo de laboratorios remotos con experimentación real accesibles mediante webs 2.0. En el desarrollo de la tesis se ha llevado a cabo la implementación del observatorio astronómico Montegancedo. Se trata del primero abierto a la sociedad a través de Internet, de uso interactivo y totalmente gratuito. Principalmente se basa en un funcionamiento meritocrático de los usuarios para conseguir tiempo de observación para la realización de experimentos astronómicos. Este observatorio y la red social subyacente ha sido la bancada empírica sobre la que se demuestran las hipótesis planteadas. En esta tesis se ha formulado un algoritmo de ordenación de los elementos pertenecientes a un sistema colaborativo. Se detalla el procedimiento completo para extrapolar el algoritmo a cualquier otro sistema de colaboración. Se describe desde la etapa inicial sobre cómo establecer los criterios de ordenación hasta cómo interpretar los resultados. En el contexto del observatorio Montegancedo, el algoritmo se emplea para determinar cuáles son los usuarios más importantes en la red social midiendo su colaboración y participación. Análogamente, se puede calcular la importancia de las fotografías, vídeos, noticias, comentarios y otros elementos consecuencia de la participación social. En la misma línea de la meritocracia social, se formula un algoritmo de plani_cación de recursos en línea basado en los resultados del algoritmo de ordenación anterior. Se diseña una solución novedosa al problema que supone compartir recursos que requieren experimentación real a través de Internet. Aplicado al observatorio Montegancedo, se explica cómo asignar tiempo de observación a los usuarios según su importancia demostrada dentro de la comunidad. El trabajo también expone el proceso de análisis y caracterización de los individuos y comunidades en línea a partir de los datos registrados, que abarca tanto información personal de los usuarios como cada una de sus interacciones intercambiadas. Abstract Web 2.0 is an Internet social phenomenon characterized by more dynamic and partipatory websites. Nowadays, there are new social trends which are causing innovative ways of voluntary collaboration and online learning. This doctoral thesis is framed within the context of Web 2.0 and collaborative learning through the Internet, speci_cally remote laboratories based on real experimentation. The aim of this research is to design a new methodology for creating collaborative projects and citizen participation, focused on education and based on real experimentation. This is a new approach to create web applications open to society to promote learning, constructivism and the generation of knowledge through collaborative, self-organized and meritocratic systems. The work in this thesis focuses on the design and development of remote laboratories experimenting with real webs are accessible through 2.0. The implementation of the astronomical observatory Montegancedo has been carried out during the thesis. This is the _rst observatory open to the public through the Internet, interactive and completely free. Mainly, it relies on a meritocratic functioning where users have to get observing time for carrying out astronomical experiments. The observatory and the underlying social network has been on the bench empirically demonstrate that the initial hypothesis. In this thesis an algorithm has been formulated to classify and order the elements belonging to a collaborative system. Full details about the procedure for the algorithm to extrapolate to any other system of collaboration. Described at an early stage on how to establish criteria for management to how to interpret the results. In the context of the observatory Montegancedo, the algorithm is used to determine which are the most important users in the social network by measuring their collaboration and participation. Similarly, one can calculate the importance of photographs, videos, news, reviews and other elements of social participation. In the same line than social meritocracy, it makes a scheduling algorithm of online resources based on the results of previous management algorithm. Designing a novel solution to the problem of sharing resources that require real experiments via Internet. Montegancedo applied to the observatory, discusses how to allocate observing time to the users according to their demonstrated importance in the community. The thesis also describes the process of analysis and characterization of individuals and communities on-line from the recorded data, which includes personal information such as each of their interactions exchanged