We posit that access control, the dominant model for modeling and managing privacy in today's online world, is fundamentally inadequate. First, with access control, users must a priori specify precisely who can or cannot access information by enumerating users, groups, or roles---a task that is difficult to get right. Second, access control fails to separate who can access information from who actually does , because it ignores the difficulty of finding information. Third, access control does not capture if and how a person who has access to some information redistributes that information. Fourth, access control fails to account for information that can be inferred from other, public information. We present exposure as an alternate model for information privacy; exposure captures the set of people expected to learn an item of information eventually. We believe the model takes an important step towards enabling users to model and control their privacy effectively. We leveraged our understanding of exposure control based user privacy in multiple context of online data sharing, ranging from usage of ACLs for controlling exposure to understanding how do users change privacy settings of their old content to mange the longitudinal exposure of their content.

 

Forgetting in Social Media: Understanding and Controlling Longitudinal Exposure of Socially Shared Data
Mainack Mondal, Johnnatan Messias, Saptarshi Ghosh, Krishna P. Gummadi, and Aniket Kate. Symposium on Usable Security and Privacy (SOUPS), Denver, CO, June 2016.

Understanding and Specifying Social Access Control Lists(Distinguished Paper)
Mainack Mondal, Yabing Liu, Bimal Viswanath, Krishna P. Gummadi, and Alan Mislove. Symposium on Usable Security and Privacy (SOUPS), Menlo Park, CA, July 2014.

Beyond Access Control: Managing Online Privacy via Exposure
Mainack Mondal, Peter Druschel, Krishna P. Gummadi, Alan Mislove. Workshop on Usable Security (USEC), San Diego, CA, February 2014.

Defending against large-scale crawls in online social networks,
Mainack Mondal, Bimal Viswanath, Allen Clement, Peter Druschel, Krishna P. Gummadi, Alan Mislove, and Ansley Post. International Conference on emerging Networking EXperiments and Technologies (CoNEXT), Nice, France, December 2012.

Simplifying Friendlist Management (Demo paper)
Yabing Liu, Bimal Viswanath, Mainack Mondal, Krishna P. Gummadi, and Alan Mislove. World Wide Web Conference (WWW), Lyon, France, April 2012.

 

Secondary footprint, a Twitter app to help users check what information others are leaking about them in Twitter

 

Friendlist Manager -- Facilitates and simplifies management of your friendlists

 

Privacy IQ, a Facebook app to raise user awareness about their privacy settings

 

Johnntan Messias
Mainack Mondal
Yabing Liu
Saptarshi Ghosh
Bimal Viswanath
Krishna Gummadi
Alan Mislove
Peter Druschel