An automatic HTTP cookie management system

Computer Networks

Volumn 54, Issue 13, 2010, Pages 2182-2198

  Yue, Chuan ^a   Xie, Mengjun ^a   Wang, Haining ^a  

^a Dept of Economics and Thomas Jefferson Program in Public Policy at the College of William and Mary   (United States)

Author keywords

HTTP cookie; Privacy; Security; Web; Web browsing

Indexed keywords

FIREFOX WEB BROWSER; INTERNET PRIVACY; MANAGEMENT SCHEME; MANAGEMENT SYSTEMS; PRIVACY; PRIVACY AND SECURITY; PRIVACY RISKS; PUBLIC CONCERN; SECURITY PROBLEMS; USER BEHAVIORS; USER PROFILE; WEB BROWSING;

WEB BROWSERS; WORLD WIDE WEB;

HTTP;

EID: 77955466662     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2010.03.006     Document Type: Article

References (57)

1. HTTP Cookie,
2. D.M. Kristol Http cookies: standards, privacy, and politics ACM Trans. Inter. Tech. 1 2 2001 151 198
3. S. Chapman, G. Dhillon, Privacy and the internet: the case of doubleclick, inc, 2002.
4. K. Fu, E. Sit, K. Smith, N. Feamster, Do's and don'ts of client authentication on the web, in: Proceedings of the In 10th USENIX Security Symposium, Washington, DC, 2001.
5. M. Jakobsson, S. Stamm, Invasive browser sniffing and countermeasures, in: Proceedings of the WWW'06, 2006, pp. 523-532.
6. P. Vogt, F. Nentwich, N. Jovanovic, E. Kirda, C. Kruegel, G. Vigna, Cross site scripting prevention with dynamic data tainting and static analysis, in: Proceedings of the NDSS'07, 2007.
7. Y.-M. Wang, D. Beck, X. Jiang, R. Roussev, C. Verbowski, S. Chen, S.T. King, Automated web patrol with Strider HoneyMonkeys: finding web sites that exploit browser vulnerabilities, in: Proceedings of the NDSS'06, 2006.
8. V. Ha, K. Inkpen, F.A. Shaar, L. Hdeib, An examination of user perception and misconception of internet cookies, in: CHI'06 extended abstracts on human factors in computing systems, Montreal, Canada, 2006, pp. 833-838.
9. Platform for privacy preferences (P3P) project,
10. L.I. Millett, B. Friedman, E. Felten, Cookies and web browser design: toward realizing informed consent online, in: Proceedings of the CHI'01, 2001, pp. 46-52.
11. U. Shankar, C. Karlof, Doppelganger: better browser privacy without the bother, in: Proceedings of the ACM CCS'06, Alexandria, VA, 2006.
12. L. Bent, M. Rabinovich, G.M. Voelker, Z. Xiao, Characterization of a large web site population with implications for content delivery, in: Proceedings of the WWW'04, 2004, pp. 522-533.
13. K. Moore, and N. Freed Use of http state management RFC 2964 2000
14. D. Kristol, and L. Montulli Http state management mechanism RFC 2109 1997
15. A.F. Tappenden, and J. Miller Cookies: a deployment study and the testing implications ACM Trans. Web 3 3 2009 1 49
16. E. Kirda, C. Kruegel, G. Vigna, and N. Jovanovic Noxes: a client-side solution for mitigating cross-site scripting attacks Proceedings of the 2006 ACM symposium on Applied computing (SAC' 06) 2006 ACM Press 330 337
17. CERT Advisory CA-2000-02 Malicious HTML tags embedded in client web requests, 2000,
18. S. Chen, J. Meseguer, R. Sasse, H.J. Wang, and Y.-M. Wang A systematic approach to uncover security flaws in gui logic Proceedings of the 2007 IEEE Symposium on Security and Privacy (S&P '07) 2007 IEEE Computer Society 71 85
19. C. Reis, J. Dunagan, H.J. Wang, O. Dubrovsky, and S. Esmeir Browsershield: vulnerability-driven filtering of dynamic html Proceedings of the 7th conference on USENIX Symposium on Operating Systems Design and Implementation (OSDI'06) 2006 USENIX Association 61 74
20. E. Kirda, C. Kruegel, G. Banks, G. Vigna, and R.A. Kemmerer Behavior-based spyware detection Proceedings of the 15th conference on USENIX Security Symposium 2006 USENIX Association 273 288
21. M.T. Louw, J.S. Lim, V. Venkatakrishnan, Extensible web browser security, in: Proceedings of the Fourth GI International Conference on Detection of Intrusions & Malware, and Vulnerability Assessment (DIMVA'07), 2007.
22. S. Saroiu, S.D. Gribble, and H.M. Levy Measurement and analysis of spywave in a university environment Proceedings of the 1st conference on Symposium on Networked Systems Design and Implementation (NSDI'04) 2004 USENIX Association 141 153
23. Same origin policy,
24. Google plugs cookie-theft data leak, 2005,
25. Google slams the door on XSS flaw 'Stop cookie thief!', 2007,
26. Flaws in IE7 and Firefox raise alarm, 2007,
27. GNU Wget - GNU Project - Free Software Foundation (FSF), .
28. A. Moshchuk, T. Bragin, S.D. Gribble, H.M. Levy, A crawler-based study of spyware in the web., in: Proceedings of the NDSS'06, 2006.
29. C. Yue, M. Xie, and H. Wang Automatic cookie usage setting with CookiePicker Proceedings of the 37th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN'07) 2007 IEEE Computer Society 460 470
30. Data flow inside Gecko, .
31. B.A. Mah, An empirical model of http network traffic., in: Proceedings of the INFOCOM'97, 1997, pp. 592-600.
32. W. Yang Identifying syntactic differences between two programs Softw. Pract. Exper. 21 7 1991 739 755
33. K.-C. Tai The tree-to-tree correction problem J. ACM 26 3 1979 422 433
34. K. Zhang, and D. Shasha Simple fast algorithms for the editing distance between trees and related problems SIAM J. Comput. 18 6 1989 1245 1262
35. T. Jiang, L. Wang, and K. Zhang Alignment of trees - an alternative to tree edit Theor. Comput. Sci. 143 1 1995 137 148
36. E. Tanaka, and K. Tanaka The tree-to-tree editing problem Int. J. Pattern Recognit. Artif. Intell. 2 2 1988 221 240
37. S.M. Selkow The tree-to-tree editing problem Inf. Process. Lett. 6 6 1977 184 186
38. G. Valiente, An efficient bottom-up distance between trees, in: Proceedings of the SPIRE'01, 2001, pp. 212-219.
39. P. Bille A survey on tree edit distance and related problems Theor. Comput. Sci. 337 1-3 2005 217 239
40. Y. Zhai, B. Liu, Web data extraction based on partial tree alignment, in: Proceedings of the WWW'05, 2005, pp. 76-85.
41. D.C. Reis, P.B. Golgher, A.S. Silva, A.F. Laender, Automatic web news extraction using tree edit distance, in: Proceedings of the WWW'04, 2004, pp. 502-511.
42. A. Torsello, and D. Hidovic-Rowe Polynomial-time metrics for attributed trees IEEE Trans. Pattern Anal. Mach. Intell. 27 7 2005 1087 1099
43. R. Al-Ekram, A. Adma, O. Baysal, diffx: an algorithm to detect changes in multi-version xml documents, in: Proceedings of the CASCON'05, 2005, pp. 1-11.
44. Y. Zhai, and B. Liu Structured data extraction from the web based on partial tree alignment IEEE Trans. Knowledge Data Eng. 18 12 2006 1614 1628
45. HTML, .
46. S. Gupta, G. Kaiser, D. Neistadt, P. Grimm, Dom-based content extraction of html documents, in: Proceedings of the WWW'03, 2003, pp. 207-214.
47. S. Joshi, N. Agrawal, R. Krishnapuram, S. Negi, A bag of paths model for measuring structural similarity in web documents, in: Proceedings of the KDD'03, 2003, pp. 577-582.
48. Cookie Culler, .
49. Privoxy - Home Page, .
50. Accurate web site visitor measurement crippled by cookie blocking and deletion, jupiterresearch finds, 2005, .
51. D. Kristol, and L. Montulli Http state management mechanism RFC 2965 2000
52. C. Jackson, A. Bortz, D. Boneh, J.C. Mitchell, Protecting browser state from web privacy attacks, in: Proceedings of the WWW'06, 2006, pp. 737-744.
53. Mitigating cross-site scripting with HTTP-only cookies, .
54. Cookie crusher, .
55. Cookie pal, .
56. Permit cookies, .
57. J. Goecks, E.D. Mynatt., Social approaches to end-user privacy management, in: Security and Usability: Designing Secure Systems That People Can Use, 2005.