The city privacy attack: Combining social media and public records for detailed profiles of adults and children

Tehila Minkus, Yuan Ding, Ratan Dey, Keith Ross

    Research output: Chapter in Book/Report/Conference proceedingConference contribution

    Abstract

    Data brokers have traditionally collected data from businesses, government records, and other publicly available offline sources. While each data source may provide only a few elements about a person's activities, data brokers combine these elements to form a detailed, composite view of the consumer's life. The emergence of social media gives data brokers unprecedented opportunities to enhance their profiles. Data brokers are increasingly interested in combining the information collected from offline sources with information publicly available in social networks to profile not only adults but also children. In this paper, we show how data brokers and other third parties can combine online and offline data sources - namely, public Facebook profiles and voter registration records - to create detailed profiles of adults, teens, and children in any target city in the US. We outline and execute an approach that leverages a Facebook user's social ties combined with the city's voter registration records to infer the Facebook users who reside in the city. These inferences enable a data broker to create detailed user profiles, which not only include information publicly available from Facebook but also the user's exact residential address, date and year of birth, and political affiliation. We further show how additional inferences can be made from the combined data. We then discuss how this city attack can be extended to create detailed profiles of minors and children. Finally, we make recommendations to Facebook, municipal authorities, and individuals to decrease the risk of this large-scale privacy breach.

    Original languageEnglish (US)
    Title of host publicationCOSN 2015 - Proceedings of the 2015 ACM Conference on Online Social Networks
    PublisherAssociation for Computing Machinery, Inc
    Pages71-81
    Number of pages11
    ISBN (Print)9781450339513
    DOIs
    StatePublished - Nov 2 2015
    Event3rd ACM Conference on Online Social Networks, COSN 2015 - Palo Alto, United States
    Duration: Nov 2 2015Nov 3 2015

    Other

    Other3rd ACM Conference on Online Social Networks, COSN 2015
    CountryUnited States
    CityPalo Alto
    Period11/2/1511/3/15

    Fingerprint

    Composite materials
    Industry

    ASJC Scopus subject areas

    • Computer Networks and Communications

    Cite this

    Minkus, T., Ding, Y., Dey, R., & Ross, K. (2015). The city privacy attack: Combining social media and public records for detailed profiles of adults and children. In COSN 2015 - Proceedings of the 2015 ACM Conference on Online Social Networks (pp. 71-81). Association for Computing Machinery, Inc. https://doi.org/10.1145/2817946.2817957

    The city privacy attack : Combining social media and public records for detailed profiles of adults and children. / Minkus, Tehila; Ding, Yuan; Dey, Ratan; Ross, Keith.

    COSN 2015 - Proceedings of the 2015 ACM Conference on Online Social Networks. Association for Computing Machinery, Inc, 2015. p. 71-81.

    Research output: Chapter in Book/Report/Conference proceedingConference contribution

    Minkus, T, Ding, Y, Dey, R & Ross, K 2015, The city privacy attack: Combining social media and public records for detailed profiles of adults and children. in COSN 2015 - Proceedings of the 2015 ACM Conference on Online Social Networks. Association for Computing Machinery, Inc, pp. 71-81, 3rd ACM Conference on Online Social Networks, COSN 2015, Palo Alto, United States, 11/2/15. https://doi.org/10.1145/2817946.2817957
    Minkus T, Ding Y, Dey R, Ross K. The city privacy attack: Combining social media and public records for detailed profiles of adults and children. In COSN 2015 - Proceedings of the 2015 ACM Conference on Online Social Networks. Association for Computing Machinery, Inc. 2015. p. 71-81 https://doi.org/10.1145/2817946.2817957
    Minkus, Tehila ; Ding, Yuan ; Dey, Ratan ; Ross, Keith. / The city privacy attack : Combining social media and public records for detailed profiles of adults and children. COSN 2015 - Proceedings of the 2015 ACM Conference on Online Social Networks. Association for Computing Machinery, Inc, 2015. pp. 71-81
    @inproceedings{9268cd3fb03a4f209d71a93e4193e80c,
    title = "The city privacy attack: Combining social media and public records for detailed profiles of adults and children",
    abstract = "Data brokers have traditionally collected data from businesses, government records, and other publicly available offline sources. While each data source may provide only a few elements about a person's activities, data brokers combine these elements to form a detailed, composite view of the consumer's life. The emergence of social media gives data brokers unprecedented opportunities to enhance their profiles. Data brokers are increasingly interested in combining the information collected from offline sources with information publicly available in social networks to profile not only adults but also children. In this paper, we show how data brokers and other third parties can combine online and offline data sources - namely, public Facebook profiles and voter registration records - to create detailed profiles of adults, teens, and children in any target city in the US. We outline and execute an approach that leverages a Facebook user's social ties combined with the city's voter registration records to infer the Facebook users who reside in the city. These inferences enable a data broker to create detailed user profiles, which not only include information publicly available from Facebook but also the user's exact residential address, date and year of birth, and political affiliation. We further show how additional inferences can be made from the combined data. We then discuss how this city attack can be extended to create detailed profiles of minors and children. Finally, we make recommendations to Facebook, municipal authorities, and individuals to decrease the risk of this large-scale privacy breach.",
    author = "Tehila Minkus and Yuan Ding and Ratan Dey and Keith Ross",
    year = "2015",
    month = "11",
    day = "2",
    doi = "10.1145/2817946.2817957",
    language = "English (US)",
    isbn = "9781450339513",
    pages = "71--81",
    booktitle = "COSN 2015 - Proceedings of the 2015 ACM Conference on Online Social Networks",
    publisher = "Association for Computing Machinery, Inc",

    }

    TY - GEN

    T1 - The city privacy attack

    T2 - Combining social media and public records for detailed profiles of adults and children

    AU - Minkus, Tehila

    AU - Ding, Yuan

    AU - Dey, Ratan

    AU - Ross, Keith

    PY - 2015/11/2

    Y1 - 2015/11/2

    N2 - Data brokers have traditionally collected data from businesses, government records, and other publicly available offline sources. While each data source may provide only a few elements about a person's activities, data brokers combine these elements to form a detailed, composite view of the consumer's life. The emergence of social media gives data brokers unprecedented opportunities to enhance their profiles. Data brokers are increasingly interested in combining the information collected from offline sources with information publicly available in social networks to profile not only adults but also children. In this paper, we show how data brokers and other third parties can combine online and offline data sources - namely, public Facebook profiles and voter registration records - to create detailed profiles of adults, teens, and children in any target city in the US. We outline and execute an approach that leverages a Facebook user's social ties combined with the city's voter registration records to infer the Facebook users who reside in the city. These inferences enable a data broker to create detailed user profiles, which not only include information publicly available from Facebook but also the user's exact residential address, date and year of birth, and political affiliation. We further show how additional inferences can be made from the combined data. We then discuss how this city attack can be extended to create detailed profiles of minors and children. Finally, we make recommendations to Facebook, municipal authorities, and individuals to decrease the risk of this large-scale privacy breach.

    AB - Data brokers have traditionally collected data from businesses, government records, and other publicly available offline sources. While each data source may provide only a few elements about a person's activities, data brokers combine these elements to form a detailed, composite view of the consumer's life. The emergence of social media gives data brokers unprecedented opportunities to enhance their profiles. Data brokers are increasingly interested in combining the information collected from offline sources with information publicly available in social networks to profile not only adults but also children. In this paper, we show how data brokers and other third parties can combine online and offline data sources - namely, public Facebook profiles and voter registration records - to create detailed profiles of adults, teens, and children in any target city in the US. We outline and execute an approach that leverages a Facebook user's social ties combined with the city's voter registration records to infer the Facebook users who reside in the city. These inferences enable a data broker to create detailed user profiles, which not only include information publicly available from Facebook but also the user's exact residential address, date and year of birth, and political affiliation. We further show how additional inferences can be made from the combined data. We then discuss how this city attack can be extended to create detailed profiles of minors and children. Finally, we make recommendations to Facebook, municipal authorities, and individuals to decrease the risk of this large-scale privacy breach.

    UR - http://www.scopus.com/inward/record.url?scp=84964061264&partnerID=8YFLogxK

    UR - http://www.scopus.com/inward/citedby.url?scp=84964061264&partnerID=8YFLogxK

    U2 - 10.1145/2817946.2817957

    DO - 10.1145/2817946.2817957

    M3 - Conference contribution

    AN - SCOPUS:84964061264

    SN - 9781450339513

    SP - 71

    EP - 81

    BT - COSN 2015 - Proceedings of the 2015 ACM Conference on Online Social Networks

    PB - Association for Computing Machinery, Inc

    ER -