REPRIV: Re-imagining content personalization and in-browser privacy

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2011, Pages 131-146

  Fredrikson, Matthew ^a   Livshits, Benjamin ^b  

^a Department of Family Medicine and Community Health   (United States)

^b MICROSOFT RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CASE-STUDIES; CONTENT PERSONALIZATION; HIGH QUALITY; IN BROWSERS; INTEREST MINING; NETFLIX; PERSONALIZATIONS; THIRD PARTIES; UNTRUSTED CODE; USERS' INTERESTS;

EID: 80051966472     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2011.37     Document Type: Conference Paper

References (38)

1. G. Aggarwal, E. Bursztein, C. Jackson, and D. Boneh. An analysis of private browsing modes in modern browsers. In Proceedings of the Usenix Security Symposium, Jul. 2010.
2. J. Becker and H. Chen. Measuring privacy risk in online social networks. In Proceedings of the Workshop on Web 2.0 Security and Privacy, May 2009.
3. The Bing Toolbar. http://www.discoverbing.com/toolbar.
4. W. Consortium. Platform for Privacy Preferences (P3P) Project. http://www.w3.org/P3P.
5. Spam database lookup. http://www.dnsbl.info.
6. C. Dwork. Differential privacy: a survey of results. In Proceedings of the International Conference on Theory and Applications of Models of Computation, May 2008.
7. P. Eckersley. How Unique Is Your Web Browser? Technical report, Electronic Frontier Foundation, Mar. 2009.
8. The Electronic Freedom Foundation. http://www.eff.org.
9. M. Fredrikson and B. Livshits. RePriv: Re-imagining in-browser privacy. Technical Report MSR-TR-2010-116, Microsoft Research, Aug. 2010.
10. J. Freudiger, N. Vratonjic, and J.-P. Hubaux. Towards Privacy-Friendly Online Advertising. In Proceedings of the Workshop on Web 2.0 Security and Privacy, May 2009.
11. Google AdSense privacy information. http://www.google.com/privacy-ads. html#toc-faq.
12. The Google Toolbar. http://toolbar.google.com.
13. A. Guha, M. Fredrikson, B. Livshits, and N. Swamy. Verified security for browser extensions. In Proceedings of the IEEE Symposium on Security and Privacy, May 2011.
14. S. Guha, A. Reznichenko, K. Tang, H. Haddadi, and P. Francis. Serving Ads from localhost for Performance, Privacy, and Profit. In Proceedings of Hot Topics in Networking, Nov. 2009.
15. D. C. Howe and H. Nissenbaum. TrackMeNot: Resisting surveillance in web search. In I. Kerr, V. Steeves, and C. Lucock, editors, Lessons from the Identity Trail: Anonymity, Privacy, and Identity in a Networked Society, chapter 23. 2009.
16. C. Jackson, A. Bortz, D. Boneh, and J. C. Mitchell. Protecting browser state from web privacy attacks. In Proceedings of the International Conference on World Wide Web, May 2006.
17. M. Jakobsson, A. Juels, and J. Ratkiewicz. Privacy-Preserving History Mining for Web Browsers. In Proceedings of the Workshop on Web 2.0 Security and Privacy, May 2010.
18. W. S. Journal. What they know. http://blogs.wsj.com/wtk/, 2011.
19. A. Juels. Targeted advertising⋯ and privacy too. In Proceedings of the Conference on Topics in Cryptology, Apr. 2001.
20. P. G. Kelley, L. Cesca, J. Bresee, and L. F. Cranor. Standardizing privacy notices: An online study of the nutrition label approach. In Proceedings of the International Conference on Human Factors in Computing Systems, Apr. 2010.
21. B. Lerner, H. Venter, B. Burg, and W. Schulte. An experimental extensible, reconfigurable platform for HTML-based applications, Oct. 2010.
22. McAfee Inc. Spyware information. http://www.mcafee.com/us/security- wordbook/spyware.html.
23. K. McKinley. Cleaning Up After Cookies Version 1.0. Technical report, ISEC Partners, Dec. 2010.
24. F. McSherry and I. Mironov. Differentially private recommender systems: building privacy into the net. In Proceedings of the International Conference on Knowledge Discovery and Data Mining, Jun. 2009.
25. Amazon Mechanical Turk. https://www.mturk.com/mturk/welcome.
26. A. Narayanan and V. Shmatikov. Robust de-anonymization of large sparse datasets. In Proceedings of the IEEE Symposium on Security and Privacy, May 2008.
27. A. Narayanan and V. Shmatikov. De-anonymizing social networks. IEEE Sympolsium on Security and Privacy, May 2009.
28. The Open Directory Project. http://dmoz.org.
29. D. Pierrakos, G. Paliouras, C. Papatheodorou, and C. D. Spyropoulos. Web usage mining as a tool for personalization: A survey. User Modeling and User-Adapted Interaction, 13(4), 2003.
30. Same origin policy: Protecting browser state from web privacy attacks. http://crypto.stanford.edu/safecache/.
31. N. Swamy, J. Chen, and R. Chugh. Enforcing stateful authorization and information flow policies in fine. In In Proceedings of the European Symposium on Programming, Mar. 2010.
32. TargetAPI. http://www.targetapi.com.
33. The Mozilla Team. Plugging the CSS History Leak. http://blog.mozilla.com/ security/2010/03/31/plugging-the-css-history-leak, 2010.
34. V. Toubiana, A. Narayanan, D. Boneh, H. Nissenbaum, and S. Barocas. Adnostic: Privacy preserving targeted advertising. In Proceedings of the Network and Distributed System Security Symposium, Feb. 2010.
35. WebMii: A person search engine. http://www.webmii.com.
36. G. Wondracek, T. Holz, E. Kirda, and C. Kruegel. A practical attack to de-anonymize social network users. In IEEE Symposium on Security and Privacy, May 2010.
37. Yahoo! BOSS API. http://developer.yahoo.com/search/boss/.
38. The Yahoo Toolbar. http://toolbar.yahoo.com.