Publication Type
Conference Paper
Version
submittedVersion
Publication Date
5-2013
Abstract
Most social networking platforms protect user's private information by limiting access to it to a small group of members, typically friends of the user, while allowing (virtually) everyone's access to the user's public data. In this paper, we exploit public data available on Facebook to infer users' undisclosed interests on their profile pages. In particular, we infer their undisclosed interests from the public data fetched using Graph APIs provided by Facebook. We demonstrate that simply liking a Facebook page does not corroborate that the user is interested in the page. Instead, we perform sentiment-oriented mining on various attributes of a Facebook page to determine the user's real interests. Our experiments conducted on over 34,000 public pages collected from Facebook and data from volunteers show that our inference technique can infer interests that are often hidden by users on their personal profile with moderate accuracy. We are able to disclose 22 interests of a user and find more than 80,097 users with at least 2 interests. We also show how this inferred information can be used to break a preference based backup authentication system.
Discipline
Computer Sciences
First Page
49-60
ISSN
978-1-4503-1767-2
Identifier
10.1145/2484313.2484319
Publisher
The 8th ACM Symposium on Information, Computer and Communications Security (ASIACCS 2013)
City or Country
Hangzhou, China
Citation
Gupta, Payas; GOTTIPATI, Swapna; JIANG, Jing; and GAO, Debin.
Your love is public now: Questioning the use of personal information in authentication. (2013). 49-60.
Available at: https://ink.library.smu.edu.sg/sis_research/2298
Creative Commons License
This work is licensed under a Creative Commons Attribution-NonCommercial-No Derivative Works 4.0 International License.