SoNeUCON sub(ABC), expressive usage control model for Web-Based Social Networks

• Published in: Computers & security Vol. 43; pp. 159 - 187
• Main Authors: Gonzalez-Manzano, Lorena, Gonzalez-Tablas, Ana I, de Fuentes, Jose M, Ribagorda, Arturo
• Format: Journal Article
• Language: English
• Published: 01-06-2014
• Subjects: Access control; Computer information security; Mathematical analysis; Mathematical models; Parks; Policies; Social networks; World Wide Web
• ISSN: 0167-4048
• DOI: 10.1016/j.cose.2014.03.009

In the era of hyper-connectivity Web-Based Social Networks (WBSNs) are demanding applications. They facilitate the interaction of huge amounts of users and the development of appropriate Access Control Models (ACMs) is an arising necessity. Particularly, the development of WBSNs ACMs with expressive power and capable of managing access control along the whole usage process is the challenge pursued. To contribute on this issue, first, 23 proposals have been analysed and second, SoNeUCON sub(ABC), an expressive usage control model for WBSNs, is proposed. It extends UCONabc (Park, 2003) including relationships management and it is formally defined, specifying entities and elements involved and an access control policy language. Moreover, policy construction is carefully detailed by using regular expressions and access control enforcement functions are described. Finally, the evaluation shows, theoretically, the significant expressive power of SoNbUCON sub(ABC) and, empirically, the feasibility of its implementation by the development of a proof of concept system.