{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,11]],"date-time":"2026-05-11T11:25:42Z","timestamp":1778498742085,"version":"3.51.4"},"reference-count":29,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2025,10,22]],"date-time":"2025-10-22T00:00:00Z","timestamp":1761091200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2025,10,22]],"date-time":"2025-10-22T00:00:00Z","timestamp":1761091200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/100009567","name":"Budapest University of Technology and Economics","doi-asserted-by":"crossref","id":[{"id":"10.13039\/100009567","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2025,12]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>The rise of online social networks, user-gene-rated content, and third-party apps made data sharing an inevitable trend, driven by both user behavior and the commercial value of personal information. As service providers amass vast amounts of data, safeguarding individual privacy has become increasingly challenging. Privacy Threat Modeling has emerged as a critical tool for identifying and mitigating risks, with methodologies such as LINDDUN, xCOMPASS, and PANOPTIC offering systematic approaches. However, these frameworks primarily focus on threats arising from interactions between a single user and system components, often overlooking interdependent privacy (IDP); the phenomenon where one user\u2019s actions affect the privacy of other users and even non-users. IDP risks are particularly pronounced in third-party applications, where platform permissions, APIs, and user behavior can lead to unintended and unconsented data sharing, such as in the Cambridge Analytica case. We argue that existing threat modeling approaches are limited in exposing IDP-related threats, potentially underestimating privacy risks. To bridge this gap, we propose a specialized methodology that explicitly focuses on interdependent privacy. Our contributions are threefold: (i) we identify IDP-specific challenges and limitations in current threat modeling frameworks, (ii) we present the Interdependent Privacy Threat Analysis (IDPA) framework, a threat modeling approach tailored to IDP threats, and (iii) we validate our approach through a case study on WeChat. We believe that IDPA can operate effectively on systems other than third-party apps and may motivate further research on specialized threat modeling.<\/jats:p>","DOI":"10.1007\/s10207-025-01135-8","type":"journal-article","created":{"date-parts":[[2025,10,22]],"date-time":"2025-10-22T05:32:43Z","timestamp":1761111163000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Modeling interdependent privacy threats"],"prefix":"10.1007","volume":"24","author":[{"given":"Shuaishuai","family":"Liu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gergely","family":"Bicz\u00f3k","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,10,22]]},"reference":[{"issue":"2","key":"1135_CR1","doi-asserted-by":"publisher","first-page":"442","DOI":"10.1257\/jel.54.2.442","volume":"54","author":"A Acquisti","year":"2016","unstructured":"Acquisti, A., Taylor, C., Wagman, L.: The economics of privacy. Journal of economic Literature 54(2), 442\u2013492 (2016)","journal-title":"Journal of economic Literature"},{"issue":"1","key":"1135_CR2","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/s00766-010-0115-7","volume":"16","author":"M Deng","year":"2011","unstructured":"Deng, M., Wuyts, K., Scandariato, R., Preneel, B., Joosen, W.: A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements. Requirements Eng. 16(1), 3\u201332 (2011)","journal-title":"Requirements Eng."},{"key":"1135_CR3","unstructured":"Wuyts, K., Joosen, W.: Linddun privacy threat modeling: a tutorial. CW Reports, (2015)"},{"key":"1135_CR4","doi-asserted-by":"crossref","unstructured":"Dev, J., Rashidi, B., Garg, V.: Models of applied privacy (map): A persona based approach to threat modeling. In Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems, CHI \u201923, New York, NY, USA, (2023). Association for Computing Machinery","DOI":"10.1145\/3544548.3581484"},{"key":"1135_CR5","unstructured":"Katcher, S., Ballard, B., Bloom, C., Isaacson, K., McEwen, J., Shapiro, S., Slotter, S., Paes, M., Xu, R.: The $$\\text{panoptic}^{\\rm TM}$$ privacy threat model. In Twentieth Symposium on Usable Privacy and Security (SOUPS), (2024)"},{"key":"1135_CR6","doi-asserted-by":"crossref","unstructured":"Bicz\u00f3k, G., Chia, P.H.: Interdependent privacy: Let me share your data. In Ahmad-Reza Sadeghi, editor, Financial Cryptography and Data Security - 17th International Conference, FC 2013, Okinawa, Japan, April 1-5, 2013, Revised Selected Papers, volume 7859 of Lecture Notes in Computer Science, pages 338\u2013353. Springer, (2013)","DOI":"10.1007\/978-3-642-39884-1_29"},{"key":"1135_CR7","doi-asserted-by":"publisher","first-page":"179","DOI":"10.1016\/j.cose.2018.03.015","volume":"77","author":"I Symeonidis","year":"2018","unstructured":"Symeonidis, I., Bicz\u00f3k, G., Shirazi, F., P\u00e9rez-Sol\u00e0, C., Schroers, J., Preneel, B.: Collateral damage of facebook third-party applications: a comprehensive study. Comput. Secur. 77, 179\u2013208 (2018)","journal-title":"Comput. Secur."},{"key":"1135_CR8","doi-asserted-by":"crossref","unstructured":"Liu, Shuaishuai, Bicz\u00f3k, Gergely: Idpfilter: Mitigating interdependent privacy issues in third-party apps. Computers & Security, 104321 (2025)","DOI":"10.1016\/j.cose.2025.104321"},{"key":"1135_CR9","doi-asserted-by":"crossref","unstructured":"Humbert, M., Ayday, E., Hubaux, J. P., Telenti, A.: Addressing the concerns of the lacks family: quantification of kin genomic privacy. In Ahmad-Reza Sadeghi, Virgil\u00a0D. Gligor, and Moti Yung, editors, 2013 ACM SIGSAC Conference on Computer and Communications Security, CCS\u201913, Berlin, Germany, November 4-8, 2013, pages 1141\u20131152. ACM, (2013)","DOI":"10.1145\/2508859.2516707"},{"issue":"4","key":"1135_CR10","doi-asserted-by":"publisher","first-page":"433","DOI":"10.1177\/0743915619858924","volume":"38","author":"B Kamleitner","year":"2019","unstructured":"Kamleitner, B., Mitchell, V.: Your data is my data: a framework for addressing interdependent privacy infringements. Journal of Public Policy & Marketing 38(4), 433\u2013450 (2019)","journal-title":"Journal of Public Policy & Marketing"},{"issue":"7","key":"1135_CR11","doi-asserted-by":"publisher","first-page":"1051","DOI":"10.1177\/1461444814543995","volume":"16","author":"Alice E Marwick","year":"2014","unstructured":"Marwick, Alice E., Boyd, Danah: Networked privacy: How teenagers negotiate context in social media. New media & society 16(7), 1051\u20131067 (2014)","journal-title":"New media & society"},{"issue":"3","key":"1135_CR12","doi-asserted-by":"publisher","first-page":"829","DOI":"10.1109\/TMC.2016.2561281","volume":"16","author":"A-M Olteanu","year":"2017","unstructured":"Olteanu, A.-M., Huguenin, K., Shokri, R., Humbert, M., Hubaux, J.-P.: Quantifying interdependent privacy risks with location data. IEEE Trans. Mob. Comput. 16(3), 829\u2013842 (2017)","journal-title":"IEEE Trans. Mob. Comput."},{"key":"1135_CR13","doi-asserted-by":"crossref","unstructured":"Olteanu, A. M., Huguenin, K., Dacosta, I., Hubaux, J. P.: Consensual and privacy-preserving sharing of multi-subject and interdependent data. In 25th Annual Network and Distributed System Security Symposium, NDSS 2018, San Diego, California, USA, February 18-21, 2018. The Internet Society, (2018)","DOI":"10.14722\/ndss.2018.23002"},{"issue":"4","key":"1135_CR14","doi-asserted-by":"publisher","first-page":"101","DOI":"10.9785\/ovs-cri-2010-101","volume":"11","author":"N Helberger","year":"2010","unstructured":"Helberger, N., van Hoboken, J.: Little brother is tagging you-legal and policy implications of amateur data controllers. Computer law review international 11(4), 101\u2013109 (2010)","journal-title":"Computer law review international"},{"key":"1135_CR15","doi-asserted-by":"crossref","unstructured":"Humbert, Mathias, Trubert, Benjamin, Huguenin, K\u00e9vin.: A survey on interdependent privacy. ACM Comput. Surv. 52(6) (2019)","DOI":"10.1145\/3360498"},{"key":"1135_CR16","doi-asserted-by":"crossref","unstructured":"Alshehri, A., Spielman, J., Prasad, A., Yue, C.: Exploring the privacy concerns of bystanders in smart homes from the perspectives of both owners and bystanders. Proceedings on Privacy Enhancing Technologies, (2022)","DOI":"10.56553\/popets-2022-0064"},{"key":"1135_CR17","doi-asserted-by":"crossref","unstructured":"O\u2019Hagan, J., Saeghe, P., Gugenheimer, J., Medeiros, D., Marky, K., Khamis, M., McGill, M.: Privacy-enhancing technology and everyday augmented reality: understanding bystanders\u2019 varying needs for awareness and consent. Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies 6(4), 1\u201335 (2023)","DOI":"10.1145\/3569501"},{"key":"1135_CR18","doi-asserted-by":"crossref","unstructured":"Zhan, X., Seymour, W., Such, J.: Beyond individual concerns: multi-user privacy in large language models. In Proceedings of the 6th ACM Conference on Conversational User Interfaces, 1\u20136, (2024)","DOI":"10.1145\/3640794.3665883"},{"key":"1135_CR19","doi-asserted-by":"crossref","unstructured":"Pu, Y., Grossklags, J.: Towards a model on the factors influencing social app users\u2019 valuation of interdependent privacy. Proceedings on Privacy Enhancing Technologies, (2016)","DOI":"10.1515\/popets-2016-0005"},{"key":"1135_CR20","doi-asserted-by":"crossref","unstructured":"Liu, S., Herendi, B., Bicz\u00f3k, G.: Interdependent privacy issues are pervasive among third-party applications. In Joaquin Garcia-Alfaro, Jose\u00a0Luis Mu\u00f1oz-Tapia, Guillermo Navarro-Arribas, and Miguel Soriano, editors, Data Privacy Management, Cryptocurrencies and Blockchain Technology, pages 70\u201386, Cham, (2022). Springer International Publishing","DOI":"10.1007\/978-3-030-93944-1_5"},{"issue":"1","key":"1135_CR21","doi-asserted-by":"publisher","first-page":"31","DOI":"10.1111\/1468-5973.12143","volume":"25","author":"Janine S Hiller","year":"2017","unstructured":"Hiller, Janine S., Russell, Roberta S.: Privacy in crises: The nist privacy framework. Journal of Contingencies and Crisis Management 25(1), 31\u201338 (2017)","journal-title":"Journal of Contingencies and Crisis Management"},{"key":"1135_CR22","doi-asserted-by":"crossref","unstructured":"Wuyts, K., Sion, L., Joosen, W.: LINDDUN GO: A lightweight approach to privacy threat modeling. In IEEE European Symposium on Security and Privacy Workshops, EuroS &P Workshops 2020, Genoa, Italy, September 7-11, 2020, pages 302\u2013309. IEEE, (2020)","DOI":"10.1109\/EuroSPW51379.2020.00047"},{"key":"1135_CR23","doi-asserted-by":"crossref","unstructured":"Sion, L., Wuyts, K., Yskout, K., Van Landuyt, D., Joosen, W.: Interaction-based privacy threat elicitation. In 2018 IEEE European Symposium on Security and Privacy Workshops, EuroS &P Workshops 2018, London, United Kingdom, April 23-27, 2018, pages 79\u201386. IEEE, (2018)","DOI":"10.1109\/EuroSPW.2018.00017"},{"key":"1135_CR24","doi-asserted-by":"crossref","unstructured":"Sion, L., Landuyt, D. V., Wuyts, K., Joosen, W.: Privacy risk assessment for data subject-aware threat modeling. In 2019 IEEE Security and Privacy Workshops (SPW), pages 64\u201371. IEEE, (2019)","DOI":"10.1109\/SPW.2019.00023"},{"key":"1135_CR25","doi-asserted-by":"crossref","unstructured":"Colesky, M., Hoepman, J. H., Hillen, C.: A critical analysis of privacy design strategies. In 2016 IEEE security and privacy workshops (SPW), pages 33\u201340. IEEE, (2016)","DOI":"10.1109\/SPW.2016.23"},{"key":"1135_CR26","unstructured":"Solove, D. J., Schwartz, P.M.: Information privacy law. Aspen Publishing, (2020)"},{"key":"1135_CR27","doi-asserted-by":"crossref","unstructured":"Alashwali, E.: Two types of data-privacy controls. Commun. ACM 68(8), 34\u201335 (2025)","DOI":"10.1145\/3723453"},{"key":"1135_CR28","doi-asserted-by":"crossref","unstructured":"Shin, D.: Debiasing AI: Rethinking the intersection of innovation and sustainability. Routledge, (2025)","DOI":"10.1201\/9781003530244"},{"key":"1135_CR29","doi-asserted-by":"crossref","unstructured":"Shin, D.: Artificial misinformation. Exploring human-algorithm interaction online, (2024)","DOI":"10.1007\/978-3-031-52569-8"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01135-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-025-01135-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01135-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T07:05:42Z","timestamp":1764572742000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-025-01135-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,22]]},"references-count":29,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2025,12]]}},"alternative-id":["1135"],"URL":"https:\/\/doi.org\/10.1007\/s10207-025-01135-8","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,10,22]]},"assertion":[{"value":"17 May 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 September 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 October 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"224"}}