Privacy risk assessment on online photos

Haitao Xu, Haining Wang, Angelos Stavrou

Research output: Chapter in Book/Report/Conference proceedingConference contribution

6 Citations (Scopus)

Abstract

With the rising popularity of cameras and people’s increasing desire to share photos, an overwhelming number of photos have been posted all over the Web. A digital photo usually contains much information in its metadata. Once published online, a photo could disclose much more information beyond what is visually depicted in the photo and what the owner expects to share. The metadata contained in digital photos could pose significant privacy threats to their owners. Our work aims to raise public awareness of privacy risks resulting from sharing photos online and subsequent photo handling conducted by contemporary media sites. To this end, we investigated the prevalence of metadata information among digital photos and assessed the potential privacy risks arising from the metadata information. We also studied the policies adopted by online media sites on handling the metadata information embedded in the photos they host. We examined nearly 100,000 photos collected from over 600 top-ranked websites in seven categories and found that the photo handling policy adopted by a site largely varies depending on the category of the site. We demonstrated that some trivial looking metadata information suffices to mount real-world attacks against photo owners.

Original languageEnglish (US)
Title of host publicationResearch in Attacks, Intrusions, and Defenses - 18th International Symposium, RAID 2015, Proceedings
EditorsHerbert Bos, Gregory Blanc, Fabian Monrose
PublisherSpringer Verlag
Pages427-447
Number of pages21
ISBN (Print)9783319263618
DOIs
StatePublished - Jan 1 2015
Externally publishedYes
Event18th International Symposium on Research in Attacks, Intrusions, and Defenses, RAID 2015 - Kyoto, Japan
Duration: Nov 2 2015Nov 4 2015

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume9404
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference18th International Symposium on Research in Attacks, Intrusions, and Defenses, RAID 2015
CountryJapan
CityKyoto
Period11/2/1511/4/15

Fingerprint

Risk Assessment
Metadata
Risk assessment
Privacy
Websites
Trivial
Sharing
Camera
Cameras
Attack
Vary

ASJC Scopus subject areas

  • Theoretical Computer Science
  • Computer Science(all)

Cite this

Xu, H., Wang, H., & Stavrou, A. (2015). Privacy risk assessment on online photos. In H. Bos, G. Blanc, & F. Monrose (Eds.), Research in Attacks, Intrusions, and Defenses - 18th International Symposium, RAID 2015, Proceedings (pp. 427-447). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 9404). Springer Verlag. https://doi.org/10.1007/978-3-319-26362-5_20

Privacy risk assessment on online photos. / Xu, Haitao; Wang, Haining; Stavrou, Angelos.

Research in Attacks, Intrusions, and Defenses - 18th International Symposium, RAID 2015, Proceedings. ed. / Herbert Bos; Gregory Blanc; Fabian Monrose. Springer Verlag, 2015. p. 427-447 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 9404).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Xu, H, Wang, H & Stavrou, A 2015, Privacy risk assessment on online photos. in H Bos, G Blanc & F Monrose (eds), Research in Attacks, Intrusions, and Defenses - 18th International Symposium, RAID 2015, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 9404, Springer Verlag, pp. 427-447, 18th International Symposium on Research in Attacks, Intrusions, and Defenses, RAID 2015, Kyoto, Japan, 11/2/15. https://doi.org/10.1007/978-3-319-26362-5_20
Xu H, Wang H, Stavrou A. Privacy risk assessment on online photos. In Bos H, Blanc G, Monrose F, editors, Research in Attacks, Intrusions, and Defenses - 18th International Symposium, RAID 2015, Proceedings. Springer Verlag. 2015. p. 427-447. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). https://doi.org/10.1007/978-3-319-26362-5_20
Xu, Haitao ; Wang, Haining ; Stavrou, Angelos. / Privacy risk assessment on online photos. Research in Attacks, Intrusions, and Defenses - 18th International Symposium, RAID 2015, Proceedings. editor / Herbert Bos ; Gregory Blanc ; Fabian Monrose. Springer Verlag, 2015. pp. 427-447 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).
@inproceedings{17b966897e6346e9aef685cd8747ce8e,
title = "Privacy risk assessment on online photos",
abstract = "With the rising popularity of cameras and people’s increasing desire to share photos, an overwhelming number of photos have been posted all over the Web. A digital photo usually contains much information in its metadata. Once published online, a photo could disclose much more information beyond what is visually depicted in the photo and what the owner expects to share. The metadata contained in digital photos could pose significant privacy threats to their owners. Our work aims to raise public awareness of privacy risks resulting from sharing photos online and subsequent photo handling conducted by contemporary media sites. To this end, we investigated the prevalence of metadata information among digital photos and assessed the potential privacy risks arising from the metadata information. We also studied the policies adopted by online media sites on handling the metadata information embedded in the photos they host. We examined nearly 100,000 photos collected from over 600 top-ranked websites in seven categories and found that the photo handling policy adopted by a site largely varies depending on the category of the site. We demonstrated that some trivial looking metadata information suffices to mount real-world attacks against photo owners.",
author = "Haitao Xu and Haining Wang and Angelos Stavrou",
year = "2015",
month = "1",
day = "1",
doi = "10.1007/978-3-319-26362-5_20",
language = "English (US)",
isbn = "9783319263618",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "427--447",
editor = "Herbert Bos and Gregory Blanc and Fabian Monrose",
booktitle = "Research in Attacks, Intrusions, and Defenses - 18th International Symposium, RAID 2015, Proceedings",

}

TY - GEN

T1 - Privacy risk assessment on online photos

AU - Xu, Haitao

AU - Wang, Haining

AU - Stavrou, Angelos

PY - 2015/1/1

Y1 - 2015/1/1

N2 - With the rising popularity of cameras and people’s increasing desire to share photos, an overwhelming number of photos have been posted all over the Web. A digital photo usually contains much information in its metadata. Once published online, a photo could disclose much more information beyond what is visually depicted in the photo and what the owner expects to share. The metadata contained in digital photos could pose significant privacy threats to their owners. Our work aims to raise public awareness of privacy risks resulting from sharing photos online and subsequent photo handling conducted by contemporary media sites. To this end, we investigated the prevalence of metadata information among digital photos and assessed the potential privacy risks arising from the metadata information. We also studied the policies adopted by online media sites on handling the metadata information embedded in the photos they host. We examined nearly 100,000 photos collected from over 600 top-ranked websites in seven categories and found that the photo handling policy adopted by a site largely varies depending on the category of the site. We demonstrated that some trivial looking metadata information suffices to mount real-world attacks against photo owners.

AB - With the rising popularity of cameras and people’s increasing desire to share photos, an overwhelming number of photos have been posted all over the Web. A digital photo usually contains much information in its metadata. Once published online, a photo could disclose much more information beyond what is visually depicted in the photo and what the owner expects to share. The metadata contained in digital photos could pose significant privacy threats to their owners. Our work aims to raise public awareness of privacy risks resulting from sharing photos online and subsequent photo handling conducted by contemporary media sites. To this end, we investigated the prevalence of metadata information among digital photos and assessed the potential privacy risks arising from the metadata information. We also studied the policies adopted by online media sites on handling the metadata information embedded in the photos they host. We examined nearly 100,000 photos collected from over 600 top-ranked websites in seven categories and found that the photo handling policy adopted by a site largely varies depending on the category of the site. We demonstrated that some trivial looking metadata information suffices to mount real-world attacks against photo owners.

UR - http://www.scopus.com/inward/record.url?scp=84950326459&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84950326459&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-26362-5_20

DO - 10.1007/978-3-319-26362-5_20

M3 - Conference contribution

AN - SCOPUS:84950326459

SN - 9783319263618

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 427

EP - 447

BT - Research in Attacks, Intrusions, and Defenses - 18th International Symposium, RAID 2015, Proceedings

A2 - Bos, Herbert

A2 - Blanc, Gregory

A2 - Monrose, Fabian

PB - Springer Verlag

ER -