Enforcing user privacy in web applications using Erlang

Papagiannis, Ioannis and Migliavacca, Matteo and Eyers, David M. and Shand, Brian and Bacon, Jean and Pietzuch, Peter (2010) Enforcing user privacy in web applications using Erlang. In: W2SP 2010: Web 2.0 security and privacy 2010, May 20th, 2010, The Claremont Resort, Oakland, California. (Access to this publication is restricted)

PDF
Restricted to Repository staff only
Contact us about this Publication Download (337kB)
[img]
Official URL
http://w2spconf.com/2010/papers/p09.pdf

Abstract

Social networking applications on the web handle the personal data of a large number of concurrently active users. These applications must comply with complex privacy requirements, while achieving scalability and high performance. Applying constraints to the flow of data through such applications to enforce privacy policy is challenging because individual components process data belonging to many different users. We introduce a practical approach for uniformly enforcing privacy requirements in such applications using the actor-based Erlang programming language. To isolate the personal data of users, we exploit Erlang’s inexpensive process model and use Erlang’s message passing mechanism to add policy checks. We illustrate this approach by describing the architecture of a privacy-preserving message dispatcher in a micro-blogging service. Our performance evaluation of a prototype implementation shows that this approach can enforce fine-grained privacy guarantees with a low performance overhead.

Item Type: Conference or workshop item (Paper)
Projects: [UNSPECIFIED] SmartFlow: Extendable Event-Based Middleware
Subjects: Q Science > QA Mathematics (inc Computing science) > QA 76 Software, computer programming,
Divisions: Faculties > Science Technology and Medical Studies > School of Computing > Security Group
Faculties > Science Technology and Medical Studies > School of Computing > Future Computing Group
Depositing User: Matteo Migliavacca
Date Deposited: 23 Oct 2012 21:53
Last Modified: 15 Apr 2014 14:12
Resource URI: http://kar.kent.ac.uk/id/eprint/31872 (The current URI for this page, for reference purposes)
  • Depositors only (login required):

Downloads

Downloads per month over past year