Privacy and Security Threats in Social Network Ad Targeting and Delivery

CYBER ALLIANCE SERIES

Alan Mislove, Professor at the Khoury College of Computer Sciences, Northeastern University

When:
Wednesday, October 9, 2019
3:30pm to 5:00pm

Where:
BU LAW (765 Commonwealth Avenue, Boston, MA 02215, 15th Floor Faculty Lounge)

Abstract: The enormous financial success of online advertising platforms is partially due to their precise targeting and delivery features. Recently, such platforms have been criticized for allowing advertisers to exclude users belonging to a certain race or gender from receiving their ads. In this Cyber Alliance talk, Northeastern Prof. Alan Mislove will discuss two threads of work that aim to understand the extent of this discrimination.

First, he will examine the advertisers’ choices about who they wish to bid on. Most platforms allow advertisers to target users directly by uploading their personally identifiable information (PII), but it remains unclear which sources of PII ad platforms use. Focusing on Facebook, Prof. Mislove will demonstrate that despite all privacy settings being enabled, phone numbers and email addresses added for security purposes (e.g., two-factor authentication), those provided to the Facebook Messenger app, and those included in friends’ uploaded contact databases are all used by Facebook to allow advertisers to target users.

Second, he will examine the platform’s choices about who should see an ad. Prof. Mislove will demonstrate that ad delivery can be significantly skewed on Facebook, due to the platform’s predictions about the “relevance” of ads to different groups. He will demonstrate significant skew in delivery along gender and racial lines for “real” ads for employment and housing opportunities. His findings have detailed previously unknown mechanisms that could lead to discriminatory ad delivery, even when advertisers set their targeting parameters to be highly inclusive.

Bio: Alan Mislove is a Professor at the Khoury College of Computer Sciences at Northeastern University. He received a BA, MS, and Ph.D. from Rice University in 2002, 2005, and 2009, respectively. Professor Mislove’s research concerns distributed systems and networks, with a focus on using social networks to enhance the security, privacy, and efficiency of newly emerging systems. He was a recipient of the NSF CAREER Award in 2011, and his work has been covered by the Wall Street Journal, the New York Times, and the CBS Evening News.