LiU Electronic Press
Full-text not available in DiVA
Author:
Vapen, Anna (Linköping University, Department of Computer and Information Science, Database and information techniques)
Carlsson, Niklas (Linköping University, Department of Computer and Information Science, Database and information techniques)
Mahanti, Anirban (NICTA, Australia)
Shahmehri, Nahid (Linköping University, Department of Computer and Information Science, Artificial Intelligence and Intergrated Computer systems)
Title:
Third-party Identity Management Usage on the Web
Department:
Linköping University, Department of Computer and Information Science, Artificial Intelligence and Intergrated Computer systems
Linköping University, Department of Computer and Information Science, Database and information techniques
Publication type:
Conference paper (Refereed)
Language:
English
In:
Proc. Passive and Active Measurement Conference (PAM)
Conference:
Passive and Active Measurement Conference (PAM), Los Angeles, CA, Mar. 2014
Series:
Lecture Notes in Computer Science, ISSN 0302-9743; 8362
Pages:
151-
Year of publ.:
2014
URI:
urn:nbn:se:liu:diva-108504
Permanent link:
http://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-108504
ISBN:
978-3-319-04917-5, 978-3-319-04918-2
Subject category:
Computer Science
Keywords(en) :
Third-party identity management
Abstract(en) :

Many websites utilize third-party identity management services to simplify access to their services. Given the privacy and security implications for end users, an important question is how websites select their third-party identity providers and how this impacts the characteristics of the emerging identity management landscape seen by the users. In this paper we first present a novel Selenium-based data collection methodology that identifies and captures the identity management relationships between sites and the intrinsic characteristics of the websites that form these relationships. Second, we present the first large-scale characterization of the third-party identity management landscape and the relationships that makes up this emerging landscape. As a reference point, we compare and contrast our observations with the somewhat more understood third-party content provider landscape. Interesting findings include a much higher skew towards websites selecting popular identity provider sites than is observed among content providers, with sites being more likely to form identity management relationships that have similar cultural, geographic, and general site focus. These findings are both positive and negative. For example, the high skew in usage places greater responsibility on fewer organizations that are responsible for the increased information leakage cost associated with highly aggregated personal information, but also reduces the user’s control of the access to this information

Available from:
2014-06-28
Created:
2014-06-28
Last updated:
2014-06-28
Statistics:
3 hits