# InfoRest: Restricting Privacy Leakage to Online Social Network App

## TL;DR

This paper introduces InfoRest, a new access control framework for online social networks that aims to better protect user privacy when third-party apps access user data, using a relation-based policy model and logical verification.

## Contribution

It presents a novel access control framework, InfoRest, incorporating user privacy preferences and attribute generalization, with a relation-based policy model and logical correctness verification.

## Key findings

- Proposes a relation-based access control (ReBAC) policy model.
- Uses predicate calculus for access condition representation.
- Demonstrates correctness with answer set programming.

## Abstract

In recent years, Online Social Networks (OSNs) have become immensely popular as social interaction services among worldwide Internet users. OSNs facilitate Third-party applications (TPAs) which provide many additional functionalities to users. While providing the extended services TPAs access the users data which would raise serious concerns to user privacy. This is due to the lack of user data protection mechanisms by OSN and none of the present OSN platforms offers satisfactory protection mechanisms to users private data. In this paper, we propose an access control framework called InfoRest to restrict user data to TPA in OSN, considering users privacy preferences and attribute generalization. Further, we propose a relation based access control (ReBAC) policy model and use predicate calculus to represent access conditions. The usability and correctness of the proposed policy model are demonstrated with the help of a logical model developed using answer set programming.