Modeling Unintended Personal-Information Leakage from Multiple Online Social Networks

Most people have multiple accounts on different social networks. Because these networks offer various levels of privacy protection, the weakest privacy policies in the social network ecosystem determine how much personal information is disclosed online. A new information leakage measure quantifies the information available about a given user. Using this measure makes it possible to evaluate the vulnerability of a user's social footprint to two known attacks: physical identification and password recovery. Experiments show the measure's usefulness in quantifying information leakage from publicly crawled information and also suggest ways of better protecting privacy and reducing information leakage in the social Web.

Dangers of Unintended Personal-Information Leak

We focus on the use of personal information for concrete attacks to illustrate the dangers of unintended personal-information leak. The two attacks we investigated are characterized by a set of personal attributes that enable attackers to deduce sensitive information about the user.