Social Network Security and Privacy Survey

This book presents the latest research on the challenges and solutions affecting the equilibrium between freedom of speech, freedom of information, information security, and the right to informational privacy. Given the complexity of the topics addressed, the book shows how old legal and ethical frameworks may need to be not only updated, but also supplemented and complemented by new conceptual solutions. Neither a conservative attitude (“more of the same”) nor a revolutionary zeal (“never seen before”) is likely to lead to satisfactory solutions. Instead, more reflection and better conceptual design are needed, not least to harmonise different perspectives and legal frameworks internationally. The focus of the book is on how we may reconcile high levels of information security with robust degrees of informational privacy, also in connection with recent challenges presented by phenomena such as “big data” and security scandals, as well as new legislation initiatives, such as those concerning “the right to be forgotten” and the use of personal data in biomedical research. The book seeks to offer analyses and solutions of the new tensions, in order to build a fair, shareable, and sustainable balance in this vital area of human interactions.

JSTOR is a not-for-profit service that helps scholars, researchers, and students discover, use, and build upon a wide range of content in a trusted digital archive. We use information technology and tools to increase productivity and facilitate new forms of scholarship. For more information about JSTOR, please contact [email protected].

Il trattamento dei cd. Big Data, per conformarsi al Regolamento europeo sulla protezione dei dati personali, richiede un'indagine preliminare volta a individuare quali siano le misure organizzative e tecniche idonee alla corretta valutazione e, poi, alla mitigazione del rischio per la privacy dei consumatori. L'articolo offre una prima ricognizione dell'apparato normativo applicabile ai Big Data e, rilevando l'inadeguatezza del tradizionale schema negoziale - basato sul binomio "informativa-consenso" - a tutelare i diritti del data owner, propone una riflessione su scenari regolamentari futuribili.

Many online social network (OSN) users are unaware of the numerous security risks that exist in these networks, including privacy violations, identity theft, and sexual harassment, just to name a few. According to recent studies, OSN users readily expose personal and private details about themselves, such as relationship status, date of birth, school name, email address, phone number, and even home address. This information, if put into the wrong hands, can be used to harm users both in the virtual world and in the real world. These risks become even more severe when the users are children.
In this paper we present a thorough review of the different security and privacy risks which threaten the well-being of OSN users in general, and children in particular. In addition, we present an overview of existing solutions that can provide better protection, security, and privacy for OSN users.
We also offer simple-to-implement recommendations for OSN users which can improve their security and privacy when using these platforms. Furthermore, we suggest future research directions.

International Journal of Wireless Network Security (IJWNS) 
http://flyccs.com/jounals/IJWNS/Home.html
Scope
International Journal of Wireless Network Security (IJWNS) is a open access journal that publishes articles which contribute new results in all areas of Computer Networks & Communications. The journal focuses on all technical and practical aspects of Computer Networks & data Communications. Authors are solicited to contribute to this journal by submitting articles that illustrate research results, projects, surveying works and industrial experiences that describe significant advances in the Computer Networks & Communications.
Topics of interest include, but are not limited to, the following
• Cryptographic protocols
• Cryptography and Coding
• Untraceability
• Privacy and authentication
• Key management
• Authentication
• Trust Management
• Quantum cryptography
• Computational Intelligence in Security
• Artificial Immune Systems
• Biological & Evolutionary Computation
• Intelligent Agents and Systems
• Reinforcement & Unsupervised Learning
• Autonomy-Oriented Computing
• Coevolutionary Algorithms
• Fuzzy Systems
• Biometric Security
• Trust models and metrics
• Regulation and Trust Mechanisms
• Data Integrity
• Models for Authentication, Trust and Authorization
• Information Hiding • Information Hiding
• Data & System Integrity
• E- Commerce
• Access Control and Intrusion Detection
• Intrusion Detection and Vulnerability Assessment
• Authentication and Non-repudiation
• Identification and Authentication
• Insider Threats and Countermeasures
• Intrusion Detection & Prevention
• Secure Cloud Computing
• Security Information Systems Architecture and Design and Security Patterns
• Security Management
• Cryptography and Information Security
• Security Requirements (threats, vulnerabilities, risk, formal methods, etc.)
• Sensor and Mobile Ad Hoc Network Security
• Service and Systems Design and QoS Network Security
• Software Security
• Security and Privacy in Mobile Systems
• Security and Privacy in Pervasive/Ubiquitous Computing
• Security and Privacy in Web Sevices
• Security and Privacy Policies
• Security Area Control
• Security Deployment•
Paper Submission
Authors are invited to submit papers for this journal through Submission System. Submissions must be original and should not have been published previously or be under consideration for publication while being evaluated for this Journal. For paper format download the template in this page Manuscript Template
Important Dates

Submission Deadline : October 27, 2018
Notification :November 27, 2018
Final Manuscript Due :December 05, 2018
Publication Date : Determined by the Editor-in-Chief

TO SUBMIT YOUR PAPER, PLEASE CLICK THE FOLLOWING LINK Submit

Contacts

Here's where you can reach us : [email protected](or) [email protected]

Ao analisar os comportamentos dos utilizadores através das mídias sociais, Hermida (2014) conclui que nestes ambientes observa-se claramente a natural predisposição humana para partilhar. Neste sentido, Rheingold (2012) discrimina cinco dimensões da literacia digital: Atenção; capacidade de detecção de lixo; participação; colaboração e uso inteligente das redes. O autor destaca também as quatro propriedades de qualquer rede social: persistência; replicabilidade; escalabilidade e capacidade de ser pesquisado; adicionando a importância de estar consciente do que nós compartilhamos e com quem (na medida em que por trás das redes, existem audiências invisíveis e entrecruzadas, insuspeitadas entre o público e o privado – apontado assim mesmo por Boyd, 2014 -).
Com uma perspetiva semelhante, Brake (2014) enfatiza a relevância do tempo e da memória, onde a acessibilidade, a durabilidade, a integralidade, a desigualdade e evolução são as principais características a ter em conta.
Lembrando-se do processo metodológico de abordagem ecológica de McLuhan, Ling (2008) concluiu que o telemóvel, multidimensional, gera uma interação mediada que ocupa o mesmo lugar, se não mesmo uma posição de topo, nas mentes dos indivíduos (ibid: 168). O conceito de gestão de privacidade em redes foi referido por Campbell (2014) como "Networked Privatism”. Marwick (2013) e Boyd (2014), por sua vez, empregaram o termo similar "Networked Privacy" para descrever as negociações emergentes dentro de ambientes específicos (dispositivos-mídias) e as esferas líquidas (Serrano Tellería, Oliveira; 2015) ou as constelações (Serrano Tellería, 2015).
Características específicas têm sido observadas em relação ao ecossistema móvel. Características gerais e relevantes do conteúdo on-line e das mídias digitais são a hipertextualidade, interatividade, multimedialidade e usabilidade. O ecossistema móvel acrescenta ubiquidade à fluidez, transitoriedade, reticularidade e dissolução de fronteiras definidas por Bauman (2005) na vida líquida moderna. Ele ainda se caracteriza pela "spreadability" e pela tensão entre a cultura de massa e colaborativa dentro de si (Jenkins, Ford & Green, 2013). Aguado et al. (2013) traçaram um paralelo entre esses recursos e da vida líquida moderna. A metáfora de Bauman da vida líquida, de acordo com a lógica da sociedade de consumo, prevê uma contrapartida útil para tratar de algumas das características de mobilidade.
Além da correlação entre o impacto da tecnologia digital e os recursos digitais da sociedade líquida (que remete para as reflexões sobre a aceleração, deslocamento, do consumo e do papel da identidade), os meios de comunicação móveis encaixam-se particularmente nos parâmetros de fluidificação das dimensões tecnológico, institucional e cultural dos mídias previamente descritos por McQuail (2006; Aguado et al, 2013).
Dadas as citadas características do ecossistema móvel dos mídias na Internet, apresenta-se neste trabalho uma análise das conversas que surgem entre os utilizadores neste ambiente fluido e em constante evolução como técnica metodológica para poder apreciar o desenvolvimento dos utilizadores por meio das mesmas aplicações, meios e plataformas que os amoldam.

Os estudos das redes sociais como aplicações, meios e plataformas que amoldam a configuração dos nossos perfis e identidades digitais, para além das suas potencialidades para influenciar as nossas identidades online – e offline – (Van Dick, 2013) apontam para uma série de articulações e características que tentam descrever as circunstâncias em que os utilizadores se desenvolvem neste ambiente online. 
Descrito como líquido (Serrano Tellería, Oliveira; 2015), a ecologia de mídias digitais caracteriza-se por a negociação constante de regras cujas normas e valores não são claras, tratando-se de um modelo descentralizado com um formato multimídia e flexível - em constante mudança, actualizado, corrigido e revisto - cujo conteúdo é insensível à distância, não-linear, e que tem uma base em diversas fontes de recursos com audiências fragmentadas, e cujos comentários são valiosos e a ter em mente (Kawamoto, 2003: 33).
Portanto, as características das mídias digitais são líquidas já que nenhumas das suas fronteiras são delimitadas e estão constantemente a ser negociadas. Para além do mais, a mesma delimitação pode ser considerada inútil se tivermos em mente que o conteúdo flui em diversas fontes de recursos e audiências fragmentadas - dispostos a expandir – (Serrano Tellería, 2015a).
Se aprofundarmos como estas aplicações, meios e plataformas articulam as ações dos utilizadores e caracterizam as circunstâncias do seu desenvolvimento online; encontramos que as reflexões académicas referem-se, principalmente, às “mediated memories” - “normative discursive strategies” - (Van Dijck, 2007: 22) e às “terministic screens”- (Markham, 2013). Estas chamam a atenção para como os filtros permitem expressarmo-nos em certos aspetos, mas não em outros. "Na cultura algorítmica de hoje, o filtro tornou-se uma metáfora difundida para as formas em que a tecnologia pode remover determinado conteúdo e como ele pode alterar ou distorcer textos, imagens e dados”.
A tecnologia tem sido descrita como "Architecture of Intimacy" (Turkle, 2011) e nos meios de comunicação social, redes sociais, como a “Architecture of Disclosure” (Facebook: Marichal, 2012), onde a quantificação métrica prescreve a interação social ("Desire for more" - Facebook: Grosser de 2014). Ambos parecem ser os jogadores poderosos da formação do comportamento normativo (“Normative Behaviour”, Linkedin e Facebook: Van Dijck, 2013). Além disso, a incluir a possibilidade de receber estímulos de todos os tipos e o ‘Design de Exposição’ (Serrano Tellería, 2014; 2015a) influencia constantemente a forma de estabelecer o nível de prioridade correctamente, bem como a forma de proteger a sua privacidade em diferentes camadas e estágios de acordo com suas possibilidades (Serrano Tellería, Oliveira; 2015; Serrano Tellería, 2015b).
Apresentamos neste trabalho os resultados da análise da rede Twitter através do software de tratamento de texto Netlyc que permitiu classificar os tweets e identificar os hashtags relevantes para o estudo. O objetivo foi tentar perceber que tensões existem na rede entre as concepções do público e do privado. Os resultados gerais apontam a um conjunto de estratégias e ferramentas para a privacidade; principalmente, a traves da partilha entre os utilizadores de diversos artigos que revelam as suas principais preocupações.

The International Journal of Computer Networks & Communications (IJCNC) is a bi monthly open access peer-reviewed journal that publishes articles which contribute new results in all areas of Computer Networks & Communications .The journal focuses on all technical and practical aspects of Computer Networks & data Communications. The goal of this journal is to bring together researchers and practitioners from academia and industry to focus on advanced networking concepts and establishing new collaborations in these areas.

Privacy has been a sensitive question lurking over the head of Indian administrators who have been equally reluctant and ignorant about answering the same. The advent of Aadhaar Act in 2016 and Government's mandate of linking Aadhaar with PAN had mooted up the issue of Privacy once again. Article 21 of the Constitution provides privacy to the citizens but only to a limited extent, which was put to question in several instances. The entire nation anticipates the decision of the Aadhaar Case. The judgment in the case of Justice Puttaswamy famously known as the Privacy Case finally arrived on 24th August 2017, which will directly impact several cases of Aadhaar pending before the Supreme court. Meanwhile, the Legislators have kept a blind eye to the long awaited Privacy Protection Bill of 2011. While concern over Individuals Privacy continued to vacillate until recently, the judgment has clarified situations to a large extent. Other sectors such as banking and welfare have brought forth their own rules to regulate Privacy concern. The article discusses the present legal situation of Privacy under various legislations, the impact of recent privacy judgment in India and analyses whether the current regulations created by various authorities such as SEBI, RBI, IRDAI have something substantial to offer or are just there to mellow down the daunting public.

Some theoretical and practical aspects of the legal mechanism of the mutual approximation and interpenetration of the Ukrainian social security system and the European Community are clarified.
The mechanism of the implementation into Ukrainian legal system the provisions of the European Social Charter (revised) that are recognized as the universal standards of the human rights to social security realization and as a basis for the functioning of the European social model is analyzed.


З’ясовано деякі теоретичні та практичні аспекти юридичного механізму взаємного зближення та проникнення систем соціального захисту України та Європейського співтовариства. Проаналізовано механізм впровадження в українську правову систему положень Європейської соціальної хартії (переглянутої), які визнано універсальними стандартами реалізації права людини на соціальне забезпечення та основою функціонування Європейської соціальної моделі.



Выяснено некоторые теоретические и практические аспекты юридического механизма взаимного сближения и проникновения систем социальной защиты Украины и Европейского сообщества. Проанализирован механизм внедрения в украинскую правовую систему положений Европейской социальной хартии (пересмотренной), которые признаны универсальными стандартами реализации права человека на социальное обеспечение и основой функционирования Европейской социальной модели.

Few would deny that monitoring employees is a necessary part of doing business. The very act of paying someone for services would necessitate, in a competitive environment, that the product produced or time spent working be observed. Continued employment, raises, and profit sharing rewards require employers to monitor their employees. Surveillance may be necessary to diminish corporate liability for sexual harassment claims, absenteeism, safety concerns, employee theft and other illegal activities that take place at work. Nevertheless, we may wonder at the efficacy and moral legitimacy of employee drug testing. In this article, after a presumption in favor of individual privacy has been established, several of the most prominent arguments in support of employee drug testing will be considered. As we shall see, none of the arguments typically offered in favor of workplace drug testing are particularly compelling.

In this article, after a brief survey of various definitions, I will offer and defend a control over access and use account of privacy. My goal is to provide a normative definition of privacy although I will sketch a descriptive account as well. Demonstrating that this conception of privacy is important and valuable has been considered in other works, thus analysis along this dimension will be purposively minimal

In this paper I will offer several arguments in support of the view that individuals have moral claims to control personal
information. Coupled with rights to control access to one's body, capacities, and powers, or physical privacy rights, we will have taken important steps toward a general right to privacy. In Part I, a definition of privacy is offered along with an account of the value of privacy. Simply put, privacy - defined as control over access to locations and information - is necessary for human well-being. In Part II, an attempt to move beyond claims of value to claims of obligation is presented and defended. Policies that sanction the capturing, storing, and trading of personal information about others is something we each have reasons to avoid. In the final part, the tension between privacy and security is considered. It is argued that privacy rights may be set aside only if specific procedural conditions are followed.

€50.000.000 that fined to Google by the French authorities in consequence of the breach of the GDPR demonstrates the GDPR’s quick entrance to the field, which has been in force for only less than a year. Thereby, the first major breach since the GDPR has come into force has been occurred and the administrative fine regulated under the GDPR has been imposed thereafter.
As “personal data” changed dimension over time, the need to modernise the principles recognised in Directive 95/46/EC (“Data Protection Directive”) and to reform this area in order to ensure effective protection to the personal rights has emerged. To that end, European Parliament accepted the GDPR on the 24 May 2016, which replaces the Data Protection Directive. Additionally, the GDPR provided for a two year-transitional period after its adoption and it became applicable on 25 May 2018. Thus, the GDPR is newly applicable.
The GDPR is the most up-to-date regulation with the strictest conditions, and the EU Member States have been preparing themselves to these conditions since its text was published. The most distinct and worrisome characteristics of the GDPR were its whole and direct applicability, expanded territorial scope and high administrative fines regulated therein. Indeed, fining a company like Google with such high amount reveals that the worrisome were accurate.

14 th International Conference on Networks & Communications (NeCoM 2022) will provide an excellent international forum for sharing knowledge and results in theory, methodology and applications of Computer Networks & Data Communications. The conference looks for significant contributions to the Computer Networks & Communications for wired and wireless networks in theoretical and practical aspects. Original papers are invited on computer Networks, Network Protocols and Wireless Networks, Data communication Technologies, and Network Security. The aim of the conference is to provide a platform to the researchers and practitioners from both academia as well as industry to meet and share cutting-edge development in the field. Authors are solicited to contribute to the conference by submitting articles that illustrate research results, projects, surveying works and industrial experiences that describe significant advances in the following areas, but are not limited to.

I have argued elsewhere that individuals have moral privacy rights that limit the surveillance activities of governments. While not absolute, privacy rights shield individuals from the prying eyes and ears of neighbors, corporations, and the state. The question that I will consider in this article is one of balance when are security interests weighty enough to overbalance individual privacy rights? Before defending my own account, I will critique three rival views. One way to strike a balance between privacy and security is to let those in power decide. In most cases, these individuals seek public office for noble purposes—we should let them decide how best to protect privacy and security. I call this position “just trust us.” A second view minimizes privacy interests by calling into doubt the activities privacy may shield. This view, called “nothing to hide,” maintains that individuals should not worry about being monitored. Only those who are engaged in immoral and illegal activity should worry about government surveillance. Similar to “nothing to hide” is the view that “security trumps.” This latter account holds that security interests are—by their nature weightier than privacy claims. After offering a critique of these attempts at balancing, I will defend my own account. I will argue that by insisting on judicial discretion for issuing warrants, demonstrating probable cause for an intrusion, and allowing public oversight of the process and reasoning involved, we may promote both privacy and security. Finally, in the concluding section I will consider the WikiLeaks movement and its impact on accountability.

This article examines the evolution of social security research from a theoretical and empirical perspective. This is done through an extensive review and analysis of publications from the Journal of International Social Security Review published by Wiley within a 50-year period (1967-2017). It was observed that at a different period in time, the social security research focused on different national and international issues that invoked different social welfare programs and pension systems approach (public or private) to facilitate the explanation of its final socio-economic impact into different social groups in the same country or region respectively.

In this paper we describe Turtle, a peer-to-peer architecture for safe sharing of sensitive data. The truly revolutionary aspect of Turtle rests in its novel way of dealing with trust issues: while existing peer-to-peer architectures with similar aims attempt to build trust relationships on top of the basic, trust-agnostic, peer-topeer overlay, Turtle takes the opposite approach, and builds its overlay on top of pre-existent trust relationships among its users. This allows both data sender and receiver anonymity, while also protecting each and every intermediate relay in the data query path. Furthermore, its unique trust model allows Turtle to withstand most of the denial of service attacks that plague other peer-to-peer data sharing networks.

The number of services and smart devices which require context is increasing, and there is a clear need for new security policies which provide security that is convenient and flexible for the user. In particular, there is an urgent need for new security policies regarding IT vulnerability layers for children, the elderly, and the disabled who experience many difficulties using current security technology. For a convenient and flexible security policy, it is necessary to collect and analyze data such as user service use patterns, locations, etc., which can be used to distinguish attack contexts and define a security service provision technology which is suitable to the user. This study has designed a user context-aware network security architecture which reflects the aforementioned requirements, collected user context-aware data, studied a user context analysis platform, and studied and analyzed context-aware security applications.

Ensuring privacy of users of social networks is probably an unsolvable conundrum. At the same time, an informed use of the existing privacy options by the social network participants may alleviate-or even prevent-some of the more drastic privacy-averse incidents. Unfortunately, recent surveys show that an average user is either not aware of these options or does not use them, probably due to their perceived complexity. It is therefore reasonable to believe that tools assisting users with two tasks: 1) understanding their social net behaviour in terms of their privacy settings and broad privacy categories, and 2) recommending reasonable privacy options, will be a valuable tool for everyday privacy practice in a social network context. This paper presents YourPrivacyProtector, a recommender system that shows how simple machine learning techniques may provide useful assistance in these two tasks to Facebook users. We support our claim with empirical results of application of YourPrivacyProtector to two groups of Facebook users.

A Mobile Ad hoc Network (MANET) is a collection of mobile stations with wireless interfaces which form a temporary network without using any central administration. MANETs are more vulnerable to attacks because they have some specific characteristics as complexity of wireless communication and lack of infrastructure. Hence security is an important requirement in mobile ad hoc networks. One of the attacks against network integrity in MANETs is the Black Hole Attack. In this type of attack all data packets are absorbed by malicious node, hence data loss occurs. In this paper we investigated the impacts of Black Hole attacks on the network performance. We have simulated black hole attacks using Network Simulator 2 (NS-2) and have measured the packet loss in the network without and with a black hole attacks. Also, we measured the packet loss when the number of black hole attacks increases.

AMAZON ECHO IN DORM ROOMS AND PRIVACY CONCERNS

Aug-28-2018

As the fall semester begins, students of Saint Louis University will soon find a new amenity, the Amazon Echo Dot, in each of their dorm rooms. Echo Dot is a voice assistant device developed by Amazon and enabled by the artificial intelligent service, Alexa. The university has decided to deploy over 2,300 of these devices in all student residences on campus to provide students with easier access to campus-related information. For example, students can ask the voice assistant about library hours and building locations.It is the first time that a university has put these voice assistant devices in student living spaces. Not surprisingly, despite the conveniences they provide, there are privacy concerns with these devices.

So, let us look at how the Amazon Echo Dot works. The device responds to a wake word chosen by its user, such as Alexa, by default. After hearing the wake word, the device records the user’s voice, sends it to the virtual assistant, Alexa, and performs a corresponding action. For example, a student may ask the Echo Dot in his dorm room to create a reminder for a personal event, which may be private information. The device will then send the voice recording to Alexa to create the reminder, as instructed. But, voice recordings like this will not be deleted upon the completion of requests.Instead, they are stored on Amazon’s server. Saint Louis University states that the Alexa-for-business platform, which is a work space solution, is used to manage the Echo devices provided to students and no personal information will be collected. According to Amazon, devices enabled by Alexa-for-business are not associated with personal accounts. It means that any data sent to the server, including voice recordings, is anonymous, and not attributable to individual students. Alexa-for-business does not give the university any access to these audio files except the ability to delete them.Thus, students’ voice recordings are anonymous and inaccessible to the school. Amazon has also been implementing controls in compliance with the EU’s General Data Protection Regulation, the GDPR, to secure customer data.

However, even though the university does not seem to pose a threat to students’ privacy, and Amazon says protecting customer data is its top priority, it is difficult to guarantee that all the conversations near Echo devices will be safe, because sometimes things do not work as intended, especially when it comes to technology. A few months ago, an Oregon family discovered that a private conversation was recorded by their Echo device and sent to a random person on their contact list because the device misheard the wake word and the following command.This incident tells us that voice recognition is not always reliable.Under the GDPR, data accuracy is an essential requirement, and users are given the right to correct any false information.But voice assistants like Amazon Echo usually do not give users enough time to correct the misinterpreted commands before these commands are executed and an impact is made, and there is not enough visual confirmation to help users understand how their data will be processed either.

Another source of risk is the vulnerabilities in these devices. Security experts had successfully exploited Echo devices and turned them into wiretaps that could continuously listen and record by either modifying the hardware or running malicious software. Although these exploits are already fixed, new vulnerabilities maybe discovered and utilized by attackers.

Other than these intrinsic risks residing in voice assistant devices, Saint Louis University is considerate about students’ privacy, and students can either mute the microphone or just unplug it and put it in a drawer for the rest of the school year.

Author – Jay Kesan

Read More at - https://www.jaykesanpublications.com

The Internet today connects about 40% of the world population. Half of these are living outside the advanced economies, often in some countries that are quickly climbing the developmental ladder, with diverse populations and inarguable economic potentialities including Saudi Arabia. There are 20 million Internet users in Saudi Arabia by the end of 2016. This research examines the impact of the Internet, innovation, disruption and the dynamics that affect adoption of electronic commerce (e-commerce) in Saudi Arabia. The study further analyzes the influence of Internet security and its impact on the users' decision-making process. The data have gathered through questionnaires that disseminated to 2,823 Saudi Internet male and female users through email. The response rate was 23%. The important findings have discussed in this study that shows that there are significant factors that are influencing the adoption of e-commerce, including legal procedures to ease of doing business, ease of doing businesses and security features and controls introduced by the online vendors.

The phenomenon of big data includes technological (new opportunities), business (application), and social aspect. The social aspect applies to the social consequences of the use of big data methods, in particular, those related to the processing of personal and other private data , as well as the danger of privacy violation. In the context of the big data phenomenon, this study presents the results of a survey on the level of acceptance of privacy violation resulting from mass data processing. The different objectives of processing were taken into account, including general, social and commercial. This study helps to draw conclusions concerning commercial and non-commercial use of private data, as well as the legal regulations on personal data processing.

This paper argues that individuals do, in a sense, own or have exclusive claims to control their personal information and body parts. It begins by sketching several arguments that support presumptive claims to informational privacy, turning then to consider cases which illustrate when and how privacy may be overridden by public health concerns.

HUMAN ERRORS AND THE COMPUTER FRAUD AND ABUSE ACT (CFAA)

Mar-14-2018

Humans and computers are alike in at least one sense –both could malfunction or be compromised. On Feb. 28th, the U.S. Marine Forces Reserve announced a data breach affecting thousands of marines, sailors and civilians, putting their identities at risk,as sensitive personal information like truncated social security numbers was leaked.The investigation showed that there was no malicious intent involved and the data breach was indeed a result of human error. An email containing the unencrypted confidential information had accidentally been sent to a wrong e-mail distribution list.But data breaches are not always accidental. Besides being duped into making unintentional disclosures, people are often tricked into giving up valuable information by scammers, and these hustles are referred to as “social engineering” or “phishing” in the cyber security world.

The 2013 Target data breach case was one such example. The case was finally settled last year, and the retail company ended up paying $18.5 million in fines for the breach of 43 million records of payment card information. The Target incident started from a phishing email sent to a third-party vendor of Target. Through that vendor, the attackers gained the login credentials of Target,and subsequently obtained unrestricted access to the confidential information of Target’s customers.

Activities like phishing are not entirely new to the law. We had them before the Internet era, and they fit the criteria for common law fraud. Fraud occurs when there is a false representation which is intended to deceive another and which causes that person to act resulting in an injury.

Phishing can possibly fit into this legal definition of fraud. But phishing and fraud potentially differ when it comes to the injury. If someone deceives you into giving them your car, you have been injured by the loss of physical property. You have no car. But there is no exclusivity for information. If you receive a phishing email that links you to a fake website designed to capture your login information, and you enter your login information, have you been injured? You can still use your login information. It’s just that now they can use it too. So when does the injury occur? Is the act of deception the injury? Does the injury occur when the perpetrator actually uses the password? Or is the injury the act of using the password plus an action that brings the perpetrator some sort of illicit personal benefit, such as stolen credit card information?

The Computer Fraud and Abuse Act is the main federal cyber crime law. One of the crimes created by the CFAA requires acting with the intent to defraud and obtaining something of value from a computer that the perpetrator lacked the authority to access. The federal court of appeals in the Ninth Circuit has said that if a person’s authorization to access a computer is taken away, they cannot circumvent that access by using someone else’s password. Presumably this reasoning would also apply to phishing, where the perpetrator had no authorization to begin with. Covering phishing under the CFAA has the same problem as viewing phishing as regular fraud, though the CFAA does state that the injury occurs when the fraudulent behavior results in the access of a protected computer without authorization or in excess of authorization.

Still, one of the major uncertainties about cyber crime is that it is unclear when the injury occurs. A data breach victim may feel uneasy upon learning that their information was stolen. Administrative staff may get nervous about keeping their job if they accidentally fall for a phishing scam. The nature of cyber crime is one reason why the CFAA needs to be amended to take modern concerns and injuries into account.

Author – Jay Kesan

Read More at - https://www.jaykesanpublications.com

International Journal of Wireless Networks Systems (IJWNS)is a bi monthly open access peer-reviewed journal that publishes articles which contribute new results in all areas of Wireless & Mobile Networks. The journal focuses on all technical and practical aspects of Wireless Networks Systems .

Abstract: Participation in social networking sites has dramatically increased in recent years. Social networking sites like Facebook1 or MySpace allow users to keep in touch with their friends, communicate and share content, ideas, activities, recommendations, with them, as well as engage in other multiuser applications. Services allow millions of individuals to create online profile and share personal information with vast networks of friends and often, unknown numbers of strangers. There are potential attacks on various aspects of user privacy. It is not well understood how privacy concern and trust influence social interactions within social networking sites. The continuous number of high-profile Internet security breaches reported in the mass media shows that despite an emphasis on security processes that there is still a gap between theory and practice. I intend in this research paper to propose a new model base on suggested model on social networking analysis and suggest a new...

Many online social network (OSN) users are unaware of the numerous security risks that exist in these networks, including privacy violations, identity theft, and sexual harassment, just to name a few. According to recent studies, OSN users readily expose personal and private details about themselves, such as relationship status, date of birth, school name, email address, phone number, and even home address. This information, if put into the wrong hands, can be used to harm users both in the virtual world and in the real world. These risks become even more severe when the users are children. In this paper we present a thorough review of the different security and privacy risks which threaten the well-being of OSN users in general, and children in particular. In addition, we present an overview of existing solutions that can provide better protection, security, and privacy for OSN users. We also offer simple-to-implement recommendations for OSN users which can improve their security and privacy when using these platforms. Furthermore, we suggest future research directions.

International Journal of Wireless Networks Systems (IJWNS)is a bi monthly open access peer-reviewed journal that publishes articles which contribute new results in all areas of Wireless & Mobile Networks. The journal focuses on all technical and practical aspects of Wireless Networks Systems .

Online Social Networking has gained tremendous popularity amongst the masses. It is usual for the users of Online Social Networks (OSNs) to share information with friends however they lose privacy. Privacy has become an important concern in online social networks. Users are unaware of the privacy risks involved when they share their sensitive information in the network.[1] One of the fundamental challenging issues is measurement of privacy .It is hard for social networking sites and users to make and adjust privacy settings to protect privacy without practical and effective way to quantify , measure and evaluate privacy. In this paper, we discussed Privacy Index (PIDX) which is used to measure a user's privacy exposure in a social network. We have also described and calculated the Privacy Quotient (PQ) i.e. a metric to measure the privacy of the user's profile using the naive approach. [2] The users should be aware of their privacy quotient and should know where they stand in the privacy measuring scale. At last we have proposed a model that will ensure privacy in the unstructured data. It will utilize the Item Response Theory model to measure the privacy leaks in the messages and text that is being posted by the users of the online social networking sites.

Now a days, to know the users location information on devices having GPS facility. When user’s location is provided to LBS, it is possible to user to know all location dependent information like location of friends or Nearest Restaurant, whether or traffic conditions. The massive use of mobile devices pave the way for the creation of wireless networks that can be used to exchange information based on locations. When the exchange of location information is done amongst entrusted parties, the privacy of the user could be in harmful. Existing protocol doesn’t work on many different mobile devices and another issue is that, Location Server (LS) should provide misleading data to user.. Proposed solution can be implemented on a desktop PCs, laptops and mobile phones to assess the efficiency of implemented protocol.

This seminar provides an overview of evidence collected across Europe’s 27 Member States (excluding Croatia) on citizens’ preferences between security and privacy in three real-life contexts:

(1) Choice of Internet service provider,

(2) Travel on Rail/Metro and

(3) Choice to purchase a device or service for storing individual health data.