DELF: Safeguarding deletion correctness in online social networks
Aug 12, 2020Katriel Cohn-Gordon, Yiannis Papagiannis

Summary
Introduced DELF, a new framework for safeguarding data deletion correctness in online social networks. DELF enables developers to implement deletion with minimal effort through annotations rather than code, and incorporates multiple correctness validation techniques (static validation, dynamic validation heuristics, privilege escalation checks, data type validation) to prevent data retention or accidental deletion of wrong data. DELF has been deployed at Facebook, supporting billions of deletions daily by immediately hiding target objects, hiding dependent data, asynchronously traversing the data graph for point deletes, and maintaining a restoration log for recovery.
More from the Application Security and Permissions trail
- How We’re Building Scam Alert on WhatsApp With End-to-End Encryption and Verifiability Guarantees
- Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study
- Labyrinth 1.1: Making End-to-End Encrypted Backups Even More Reliable
- How Meta Is Strengthening End-to-End Encrypted Backups
- Post-Quantum Cryptography Migration at Meta: Framework, Lessons, and Takeaways