Attribute-Based Access Control (ABAC) systems are commonly used for protecting resources from unauthorized accesses. They perform the access decision process taking into account a set of attributes describing the features of the subjects executing the accesses, the resources being accessed, and the environment. In this paper, we propose to enhance traditional ABAC systems by integrating them with the novel Self Sovereign Identity (SSI) paradigm. More precisely, we propose a novel access control framework, leveraging the well known eXtensible Access Control Markup Language (XACML) standard for ABAC systems, which allows to exploit SSI credentials as sources of users’ attributes for policy evaluation. Finally, we showcase a prototype implementation of our proposal, and we analyze its performance when evaluating XACML policies integrating SSI credentials with a variable number of attributes.

Modeling and predicting the behavior of nodes and users in blockchains provide opportunities for business strategy optimization. Indeed, the number of interactions of a node is strictly related to its balance and its prediction may be used for analytics purposes and investment strategies. However, the amount and diversity of information stored on the blockchain demand advanced tools for the modeling and analysis of blockchain data. Such tools should be able to capture the dynamicity and interaction of multiple independent actors, considering a large number of variables and dynamic interaction graph topologies. This is exacerbated by the use of smart contracts, programs stored in blockchain blocks that bring automation to blockchain’s operations and thus increasing the variability of the resulting interaction graphs. Existing modeling methodologies are unable to keep track of all these details, as they are not able to capture the temporal variability of the network. In this paper, we propose a novel framework for modeling and predicting the behavior of smart contracts on a blockchain. We propose the concept of temporal smart contracts networks, i.e., graphs representing the temporal evolution of interactions and data flow. Our framework allows the creation of temporal smart contract networks with different granularity levels by considering different interaction patterns between smart contracts, externally owned accounts, and internal transactions. Thanks to these graphs, we are able to model features such as the node in degree and amount of ether received by a smart contract, which are directly related to its behavior. We incorporate our modeling approach in Ethereum Data Inspection Tool (EDIT), a novel tool able to model interactions and predict them based on historical data. We test different machine learning models to predict features extracted by EDIT, hence allowing for the prediction of the overall behavior of the smart contract. We test EDIT on the Ethereum blockchain and model several temporal smart contracts networks, which represent the interactions and the data flow resulting from about 4 000 000 consecutive blocks. The evaluation of different real case studies shows that the proposed framework is able to predict, with a mean absolute error close to 1%, the evolution of several interesting properties (e.g., amount of received ether) related to both accounts and smart contracts.

The Self-Sovereign Identity (SSI) is a novel paradigm aimed at giving back users sovereignty over their digital identities. Adopting the SSI approach prevents users to have a distinct identity for each service they use, instead, use a unique decentralised identity for all the services they need to access. However, to really benefit from the SSI advantages, an actual decentralised implementation is needed to fit the specific requirements and limits of decentralised architectures, such as blockchain. To this aim, this paper proposes Algorand Identity (AlgoID), a new SSI framework for the Algorand blockchain which differs from the already existing one, because it is fully blockchain based, i.e., it exploits Algorand itself for the storage of the data identity and as the registry location. The proposed framework has been completely implemented and validated through experiments, showing that the time required to execute the framework operations is acceptably low in realistic use cases.

In recent years, Decentralized Online Social Networks (DOSNs) have been attracting the attention of many users because they reduce the risk of censorship, surveillance, and information leakage from the service provider. In contrast to the most popular Online Social Networks, which are based on centralized architectures (e.g., Facebook, Twitter, or Instagram), DOSNs are not based on a single service provider acting as a central authority. Indeed, the contents that are published on DOSNs are stored on the devices made available by their users, which cooperate to execute the tasks needed to provide the service. A specific form of cooperation is to store the content published by a user on other peers’ devices as well, hence dramatically enhancing availability. Consequently, such contents must be properly protected by the DOSN infrastructure, in order to ensure that they can be really accessed only by users who have the permission of the publishers. As a consequence, DOSNs require efficient solutions for protecting the privacy of the contents published by each user with respect to the other users of the social network. This is exactly the focus of this paper. In particular, we investigate and compare the principal content privacy enforcement models adopted by current DOSNs evaluating their suitability to support different types of privacy policies based on user groups. Such evaluation is carried out by implementing several models and comparing their performance for the typical operations performed on groups, i.e., content publish, user join, and user leave. In detail, we show that the join operation incurs a similar cost for all the privacy enforcement models and groups, while for the leave operation performance is greatly affected by the selected solution, which must be evaluated on a case-by-case basis depending on both the type and the activity level of the group—as analytically detailed in our contribution. Further, we also highlight the limitations of current approaches and show future research directions. The provided contributions, other than being interesting on their own, set a blueprint for researchers and practitioners interested in implementing DOSNs, and highlight a few open research directions.

The blockchain technology has been gaining an increasing popularity for the last years, and smart contracts are being used for a growing number of applications in several scenarios. The execution of smart contracts on public blockchains can be invoked by any user with a transaction, although in many scenarios there would be the need for restricting the right of executing smart contracts only to a restricted set of users. To help deal with this issue, this article proposes a system based on a popular access control framework called RT, Role-based Trust Management, to regulate smart contracts execution rights. The proposed system, called Layer 2 DecentrAlized Role-based Trust management (L2DART), implements the RT framework on a public blockchain, and it is designed as a layer-2 technology that involves both on-chain and off-chain functionalities to reduce the blockchain costs while keeping blockchain auditability, i.e., immutability and transparency. The on-chain costs of L2DART have been evaluated on Ethereum and compared with a previous solution implementing on-chain all the functionalities. The results show that the on-chain costs of L2DART are relatively low, making the system deployable in real-world scenarios.

Every person has associated a set of attributes that need to be shown to perform daily operations, such as the ones in personal identity card. The Self Sovereign Identity framework brings this to the digital world, giving to the user full responsibility of their own attributes. Each user receives a set of attributes is paired with as a Verifiable Credential, which could be issued, for example, by a municipality as a digitally signed ID card. However, it is not possible to disclose only one attribute of the ID card without invalidating the signature, therefore Selective Disclosure approaches have been defined to address this problem. This paper describes a selective disclosure method based on hashing, showing that the method is secure and applicable to the real world due to its low requirement in terms of space and time to create and verify a credential.

In the past years, trust management systems have been proven suitable for solving the authorization problem in distributed systems, such as peer to peer systems, social networks, cloud, mobile ad-hoc networks, and Internet of things. Trust management systems could be either managed by a central authority or decentralized. In both cases the entity or, respectively, the set of entities managing the system need to be trusted for all users. To overcome this limitation, this paper brings blockchain technology into trust management systems, proposing a novel implementation of the Role-based Trust management framework (RT) on blockchain. The approach relies on smart contracts to represent user trust networks and to infer new trust relations through the chain discovery algorithm. We evaluated a prototype implemented on Ethereum on a representative set of policies related to different scenarios.

Summary Online social networks (OSNs) have become one of the most popular platforms where people communicate by sharing contents and personal information. The interactions performed by the users allow to identify the homophily between users and reveal the presence of several communities that could depend on several factors: such as the type of relationships (eg, colleagues and school mates) or to users' preferences (eg, users' interests or hobbies). A very important issue in this scenario is the necessary to characterize such communities by using known real properties or attributes about their members. In this article, we propose an approach that identifies the communities of users by exploiting several community detection algorithms. Afterward, for each user, we exploit decision trees to find a model that describes and distinguishes community affiliations based on known attributes of the members. The evaluation of our approach is derived from a real dataset which consists of the profile information, relationships, and interactions of 95 716 Facebook users. The experimental results show that the proposed approach is able to correctly recognize which attributes of the members properly characterize their corresponding community while ensuring a high level of accuracy (about 85%).

Recommender Systems (RSs) are becoming increasingly popular in the last years. They collect reviews concerning several types of items (e.g., shops, professionals, services, songs or videos) in order to rank them according to a given criterion, and to suggest the most relevant ones to their users. However, most of the currently used RSs exhibit two main drawbacks: they are based on a centralized control model and they do not provide reward mechanisms to encourage the participation of users. To deal with these challenges, the architectures of current RSs could be enhanced through blockchain technology, thus providing novel solutions to decentralize them. As a matter of fact, the blockchain technology could be successfully adopted in this context because smart contracts would allow the decentralization of system control, while cryptocurrency and tokens could be used to implement the reward mechanism. In the light of the above considerations, this manuscript presents a decentralized rating framework aimed to support the users of RSs based on blockchain technology, providing a token-based reward mechanism that remunerates users submitting their reviews to incentivize their participation. Moreover, the proposed system provides a flexible strategy to rank items, allowing users to choose among different functions to combine reviews to obtain item ranking. The performance and the cost of using the proposed system have been evaluated on the Ropsten Ethereum test network. For instance, our experiments have shown that the median time required to store a batch of 35 ratings is about 47 s, while the average time required to obtain the score of an item having 6000 ratings is less than 2.5 s.

Abstract In the last decades, temporal networks played a key role in modelling, understanding, and analysing the properties of dynamic systems where individuals and events vary in time. Of paramount importance is the representation and the analysis of Social Media, in particular Social Networks and Online Communities, through temporal networks, due to their intrinsic dynamism (social ties, online/offline status, users’ interactions, etc..). The identification of recurrent patterns in Online Communities, and in detail in Online Social Groups, is an important challenge which can reveal information concerning the structure of the social network, but also patterns of interactions, trending topics, and so on. Different works have already investigated the pattern detection in several scenarios by focusing mainly on identifying the occurrences of fixed and well known motifs (mostly, triads) or more flexible subgraphs. In this paper, we present the concept on the Incremental Communication Patterns, which is something in-between motifs, from which they inherit the meaningfulness of the identified structure, and subgraph, from which they inherit the possibility to be extended as needed. We formally define the Incremental Communication Patterns and exploit them to investigate the interaction patterns occurring in a real dataset consisting of 17 Online Social Groups taken from the list of Facebook groups. The results regarding our experimental analysis uncover interesting aspects of interactions patterns occurring in social groups and reveal that Incremental Communication Patterns are able to capture roles of the users within the groups.

The widespread adoption of Online Social Networks (OSNs), the ever-increasing amount of information produced by their users, and the corresponding capacity to influence markets, politics, and society, have led both industrial and academic researchers to focus on how such systems could be influenced . While previous work has mainly focused on measuring current influential users, contents, or pages on the overall OSNs, the problem of predicting influencers in OSNs has remained relatively unexplored from a research perspective. Indeed, one of the main characteristics of OSNs is the ability of users to create different groups types, as well as to join groups defined by other users, in order to share information and opinions. In this article, we formulate the Influencers Prediction problem in the context of groups created in OSNs, and we define a general framework and an effective methodology to predict which users will be able to influence the behavior of the other ones in a future time period, based on historical interactions that occurred within the group. Our contribution, while rooted in solid rationale and established analytical tools, is also supported by an extensive experimental campaign. We investigate the accuracy of the predictions collecting data concerning the interactions among about 800,000 users from 18 Facebook groups belonging to different categories (i.e., News, Education, Sport, Entertainment, and Work). The achieved results show the quality and viability of our approach. For instance, we are able to predict, on average, for each group, around a third of what an ex-post analysis will show being the 10 most influential members of that group. While our contribution is interesting on its own and—to the best of our knowledge—unique, it is worth noticing that it also paves the way for further research in this field.

Distributed Online Social Networks (DOSNs) have been proposed to shift the control over user data from a unique entity, the online social network provider, to the users of the DOSN themselves. In this paper we focus on the problem of preserving the privacy of the contents shared to large groups of users. In general, content privacy is enforced by encrypting the content, having only authorized parties being able to decrypt it. When efficiency has to be taken into account, new solutions have to be devised that: i) minimize the re-encryption of the contents published in a group when the composition of the group changes; and, ii) enable a fast distribution of the cryptographic keys to all the members ($n$) of a group, each time a set of users is removed from or added to the group by the group owner. Current solutions fall short in meeting the above criteria, while our approach requires only $O(d cdot log_d(n))$ encryption operations when a user is removed from a group (where $d$ is an input parameter of the system), and $O(2cdot log_d(n))$ when a user joins the group. The effectiveness of our approach is evaluated through simulations based on a real online social network.

We propose a general framework for the recommendation of possible customers (users) to advertisers (e.g., brands) based on the comparison between On-Line Social Network profiles. In particular, we associate suitable categories and subcategories to both user and brand profiles in the considered On-line Social Network. When categories involve posts and comments, the comparison is based on word embedding, and this allows to take into account the similarity between the topics of particular interest for a brand and the user preferences. Furthermore, user personal information, such as age, job or genre, are used for targeting specific advertising campaigns. Results on real Facebook dataset show that the proposed approach is successful in identifying the most suitable set of users to be used as target for a given advertisement campaign.

With the rapid development and growth of online social networks (OSNs), researchers have been pushed forward to improve the knowledge of these complex networks by analyzing several aspects, such as the types of social media, the structural properties of the network, or the interaction patterns among users. In particular, a relevant effort has been devoted to the study and identification of cohesive groups of users in OSNs (also referred as communities) because they are the basic building block of each OSN. While several research works on groups in OSNs have mainly focused on identifying the types of groups and the contents created by their members, the analysis of internal organizations of such groups remains unexplored due to the lack of real data sets containing information about such groups, about their members, and the interactions among them. In this article, we compensate for this shortcoming by studying the main properties of groups defined in OSNs, taking as reference use cases 40 real Facebook groups of different categories that account for a total of about 500.000 users. In particular, we exploit interaction patterns among users and social network analysis to uncover interesting aspects related to the internal organization of groups. Experimental results reveal that the majority of the collected groups exhibit an internal structure where members can be clustered in four subgroups according to the level of tie strength of the relations they have. Furthermore, clusters identified on Facebook groups can provide relevant information about the importance of users within such groups.

Summary The understanding of the user temporal behavior is a crucial aspect for all those systems that rely on user resources for daily operations, such as decentralized online social networks (DOSNs). Indeed, DOSNs exploit the devices of their users to take on and share the tasks needed to provide services such as storing the published data. In the last years, the increasing popularity of DOSN services has changed the way of how people interact with each other by enabling users to connect to these services at any time by using their personal devices (such as notebooks or smartphones). As a result, the availability of data in these systems is strongly affected (or reflected) by the temporal behavior of their users in terms of connections to DOSNs. In this paper, we propose the use of linear predictors to address the problem of the availability of user devices and, hence, data in DOSNs. To validate the proposed approaches, we evaluated their performance conducting a set of simulations exploiting a dataset of temporal information concerning the connections to Facebook collected from a set of users.

Distributed Online Social Networks (DOSNs) have been recently proposed as an alternative to centralized solutions to allow a major control of the users over their own data. Since there is no centralized service provider which decides the term of service, the DOSNs infrastructure exploits users’ devices to take on the online social network services. In this paper, we propose a data allocation strategy for DOSNs which exploits the privacy policies of the users to increase the availability of the users’ contents without diverging from their privacy preferences. A set of replicas of the profile’s content of a user U are stored on the devices of other users who are entitled to access the profile according to U’s privacy policies. The experimental results obtained from the simulations on traces taken from a real social network show the effectiveness of our approach.

Distributed Online Social Networks (DOSNs) have recently been proposed to shift the control over user data from a unique entity to the users of the DOSN themselves. In this paper, we focus our attention on the problem of privacy preserving content sharing to a large group of users of the DOSNs. Several solutions, based on cryptographic techniques, have been recently proposed. The main challenge here is the definition of a scalable and decentralized approach that: i) minimizes the re-encryption of the contents published in a group when the composition of the group changes and ii) enables a fast distribution of the cryptographic keys to all the members (n) of a group, each time a new user is added or removed from the group by the group owner. Our solution achieves the above goals, providing performance unattained by our competitors. In particular, our approach requires only O(d·logn) encryption operations when the group membership changes (eviction), and only O(2·logn) when a join occurs (where d is an input parameter of the system). The effectiveness of our approach is evaluated by an experimental campaign carried out over a set of traces from a real online social network.