Analyzing Computer Security: A Threat / Vulnerability / Countermeasure Approach

18. My 100,000 Nearest and Dearest Friends

Chapter Spotlight

• Collecting personal data on the Internet

• Deriving intelligence from correlation, aggregation, and inference

• Controlling disclosure with privacy policies

• Educating users so they can make informed choices about their privacy

Attack: I See U 707

Threat: Loss of Confidentiality 708

Threat: Data Leakage 709

Threat: Introduction of Malicious Code 710

Attack Details: Unintended Disclosure 711

Vulnerability: Exploiting Trust Relationships 721

Vulnerability: Analysis on Data 722

Vulnerability: Hidden Data Attributes 722

Countermeasure: Data Suppression and Modification 724

Countermeasure: User Awareness and Education 729

Countermeasure: Policy 733

Conclusion 734

Exercises 736