Privacy Risk Analysis of Online Social Networks
暫譯: 線上社交網絡的隱私風險分析

社交網路（Online Social Networks, OSNs）所帶來的社會利益可能會吸引使用者向一個比他們的離線社交圈更不可信的在線觀眾透露前所未有的個人數據。即使使用者對某些人隱藏其個人數據並與其他人分享，OSNs 的隱私設定仍可能被繞過，從而導致各種隱私傷害，例如身份盜竊、跟蹤或歧視。因此，使用者需要協助理解其 OSN 個人資料的隱私風險，以及管理其隱私設定，以便控制這些風險，同時仍能獲得社交網路參與的好處。

本書向讀者介紹如何利用隱私風險分析概念，例如隱私傷害和風險來源，來開發用戶個人資料的隱私評分機制，以及在 OSNs 的背景下支持使用者進行隱私設定管理。隱私評分有助於檢測和最小化由於個人數據的傳播和使用所帶來的風險。本書還討論了該領域中的許多未解決問題，以鼓勵進一步的研究。

Sourya Joyee De, Indian Institute of Management Raipur
Sourya Joyee De is an Assistant Professor in IT & Systems at Indian Institute of Management Raipur, India. She is a Fellow of Indian Institute of Management Calcutta (Ph.D.). Prior to joining IIM Raipur, Sourya held research positions at INRIA Grenoble Rhone-Alpes and LORIA-CNRS-INRIA Nancy Grand-Est, France for close to four years. Her research has been funded by the French ANR project BIOPRIV, CISCO San Jose, CA, USA, Samsung GRO Grant, INRIA Project Lab CAPPRIS, and the Grand-Est Region, France. Sourya was also a Visiting Scientist at Indian Statistical Institute Kolkata, India. Her research interests include privacy risk analysis, user consent in the context of privacy, privacy policies, security in cloud computing, and rational cryptography. Her research has been published at various reputed journals and conferences. She has also published a book titled Privacy Risk Analysis with Morgan & Claypool Publishers, San Rafel, CA, USA.

Abdessamad Imine, Lorraine University, LORIA-CNRS-INRIA
Abdessamad Imine received M.Sc. and Ph.D. degrees in Computer Science from University of Sciences and Technology of Oran (USTO), Algeria, and University Henri Poincaré of Nancy, France, respectively. He is currently an Associate Professor HdR at Lorraine University and senior researcher at LORIA center of Nancy. His research interests include privacy in social networks, security for collaborative systems, optimistic protocols, and formal methods. Abdessamad Imine has developed a formal methodology for specifying and verifying the consistency of synchronized objects by operational transformation. This methodology has been successfully used in the design of a configuration management system in the LibreSource project. He has also devised protocols for controlling and enforcing privacy in social networks and protocols for synchronizing and securing shared data such as text, XML, and RDF documents. He is author and co-author of more than 82 papers in international conferences, journals, and books.

Sourya Joyee De，印度管理學院萊普爾分校
Sourya Joyee De 是印度管理學院萊普爾分校的資訊科技與系統助理教授。她是印度管理學院加爾各答分校的研究員（Ph.D.）。在加入 IIM 萊普爾之前，Sourya 在法國的 INRIA 格勒諾布爾羅納-阿爾卑斯和 LORIA-CNRS-INRIA 南希大區擔任研究職位近四年。她的研究得到了法國 ANR 項目 BIOPRIV、CISCO（美國加州聖荷西）、三星 GRO 獎學金、INRIA 項目實驗室 CAPPRIS 以及法國大東部地區的資助。Sourya 也曾擔任印度統計學院加爾各答分校的訪問科學家。她的研究興趣包括隱私風險分析、隱私背景下的用戶同意、隱私政策、雲計算安全以及理性密碼學。她的研究已在多個知名期刊和會議上發表。她還出版了一本名為《隱私風險分析》的書籍，與美國加州聖拉斐爾的 Morgan & Claypool Publishers 合作。

Abdessamad Imine，洛林大學，LORIA-CNRS-INRIA
Abdessamad Imine 獲得阿爾及利亞奧蘭科技大學（USTO）和法國南希亨利·波恩卡雷大學的計算機科學碩士和博士學位。他目前是洛林大學的副教授 HdR 和南希 LORIA 中心的高級研究員。他的研究興趣包括社交網絡中的隱私、協作系統的安全性、樂觀協議和形式方法。Abdessamad Imine 開發了一種正式的方法論，用於通過操作轉換來指定和驗證同步對象的一致性。這種方法論已成功應用於 LibreSource 項目的配置管理系統設計中。他還設計了控制和強制社交網絡隱私的協議，以及同步和保護共享數據（如文本、XML 和 RDF 文檔）的協議。他是超過 82 篇國際會議、期刊和書籍論文的作者和合著者。

Introduction
Terminology and Definitions
Dimensions of Privacy Scoring in OSNs
Attribute Visibility in OSN
Harm Trees for OSNs
Privacy Risk Analysis in OSNs
Social Benefits
Choosing the Right Privacy Settings
Conclusion
Bibliography
Authors' Biographies

Introduction

Terminology and Definitions

Dimensions of Privacy Scoring in OSNs

Attribute Visibility in OSN

Harm Trees for OSNs

Privacy Risk Analysis in OSNs

Social Benefits

Choosing the Right Privacy Settings

Conclusion

Bibliography

Authors' Biographies