The exponential growth of social networks websites nowadays, lead to the problem of securing shared data among users. How can we assure that our data are safe and secured on these platforms? As for example when, on a social network website such as Facebook, I put a photo on my profile, am I sure that this file is not misused by my contacts in the network? Even if I put some access-control policy on this file, how can I be certain that this policy is not override after the download of the file?
Traditionally, the security research community has proposed the notion of “obligation” to handle after-transfer misuse. However, obligations need substantial re-thinking to be used in the context of social networks.
In our work, we will propose a new notion of obligation, and this discussion will present its guidelines.