FPDetective: Dusting the web for fingerprinters

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2013, Pages 1129-1140

  Acar, Gunes ^a   Juarez, Marc ^a,b   Nikiforakis, Nick ^a   Diaz, Claudia ^a   Gürses, Seda ^a,c   Piessens, Frank ^a   Preneel, Bart ^a  

^a UNIVERSITY OF LEUVEN   (Belgium)

^b ARTIFICIAL INTELLIGENCE RESEARCH INSTITUTE IIIA CSIC   (Spain)

^c NEW YORK UNIVERSITY   (United States)

Author keywords

device fingerprinting; dynamic analysis; flash; javascript; privacy; tracking; web security

Indexed keywords

DEVICE FINGERPRINTING; FLASH; JAVASCRIPT; LARGE-SCALE ANALYSIS; PERSONALLY IDENTIFIABLE INFORMATION; PRIVACY AND SECURITY; WEALTH OF INFORMATION; WEB SECURITY;

DATA PRIVACY; DYNAMIC ANALYSIS; SURFACE DISCHARGES; WEBSITES;

SECURITY OF DATA;

EID: 84889043880     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2508859.2516674     Document Type: Conference Paper

References (25)

1. Nmap - Free Security Scanner For Network Exploration & Security Audits. http://www.nmap.org.
2. A. Barth. Blink: A rendering engine for the Chromium project. http://blog.chromium.org/2013/04/blink-rendering-engine-for-chromium.html.
3. K. Boda. Firegloves. http://fingerprint.pet-portal.eu/?menu=6.
4. A. Cortesi. mitmproxy: a man-in-the-middle proxy. http://mitmproxy.org/.
5. R. Dingledine, N. Mathewson, and P. Syverson. Tor: The second-generation onion router. In Proceedings of the 13th USENIX Security Symposium, pages 303-320. USENIX, 2004.
6. J. R. Douceur. The sybil attack. In Peer-to-peer Systems, pages 251-260. Springer, 2002.
7. P. Eckersley. How Unique Is Your Browser? In Proceedings of the 10th Privacy Enhancing Technologies Symposium (PETS), pages 1-17, 2010.
8. D. Goldschlag, M. Reed, and P. Syverson. Hiding routing information. In Information Hiding, pages 137-150, 1996.
9. D. Jang, R. Jhala, S. Lerner, and H. Shacham. An empirical study of privacy-violating information flows in JavaScript Web applications. In Proceedings of CCS 2010, pages 270-283, Oct. 2010.
10. A. Kapravelos, M. Cova, C. Kruegel, and G. Vigna. Escape from monkey island: Evading high-interaction honeyclients. In Proceedings of the 8th Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA), pages 124-143, 2011.
11. T. Kohno, A. Broido, and K. Claffy. Remote physical device fingerprinting. Dependable and Secure Computing, IEEE Transactions on, 2(2):93-108, 2005.
12. J. R. Mayer. Any person... a pamphleteer. Senior Thesis, Stanford University, 2009.
13. J. R. Mayer and J. C. Mitchell. Third-party web tracking: Policy and technology. In Proceedings of the IEEE Symposium on Security and Privacy, pages 413-427, 2012.
14. A. D. Miyazaki. Online privacy and the disclosure of cookie use: Effects on consumer trust and anticipated patronage. Journal of Public Policy & Marketing, 27(1):19-33, 2008.
15. K. Mowery, D. Bogenreif, S. Yilek, and H. Shacham. Fingerprinting information in JavaScript implementations. In H. Wang, editor, Proceedings of W2SP 2011. IEEE Computer Society, May 2011.
16. K. Mowery and H. Shacham. Pixel perfect: Fingerprinting canvas in HTML5. In M. Fredrikson, editor, Proceedings of W2SP 2012. IEEE Computer Society, May 2012.
17. M. Mulazzani, P. Reschl, M. Huber, M. Leithner, S. Schrittwieser, and E. Weippl. Fast and reliable browser identification with javascript engine fingerprinting. In Web 2.0 Workshop on Security and Privacy (W2SP), May 2013.
18. N. Nikiforakis, A. Kapravelos, W. Joosen, C. Kruegel, F. Piessens, and G. Vigna. Cookieless monster: Exploring the ecosystem of web-based device fingerprinting. In Proceedings of the IEEE Symposium on Security and Privacy, pages 541-555, 2013.
19. L. Olejnik, C. Castelluccia, and A. Janc. Why Johnny Can't Browse in Peace: On the Uniqueness of Web Browsing History Patterns. In the 5th workshop on Hot Topics in Privacy Enhancing Technologies (HOTPETS 2012).
20. SiteBlackBox. Case studies: Articlesbase.
21. B. Ur, P. G. Leon, L. F. Cranor, R. Shay, and Y. Wang. Smart, useful, scary, creepy: perceptions of online behavioral advertising. In Proceedings of the Eighth Symposium on Usable Privacy and Security, SOUPS '12, pages 4:1-4:15, New York, NY, USA, 2012. ACM.
22. I. Van Der Ploeg. Keys To Privacy. Translations of "the privacy problem" in Information Technologies, pages 15-36. Maastricht: Shaker, 2005.
23. T.-F. Yen, Y. Xie, F. Yu, R. P. Yu, and M. Abadi. Host fingerprinting and tracking on the web:privacy and security implications. In Proceddings of the 19th Annual Network and Distributed System Security Symposium (NDSS), 2012.
24. N. C. Zakas. How many users have JavaScript disabled? http://developer.yahoo.com/blogs/ydn/many-users-javascript-disabled-14121.html.
25. M. Zalewski. p0f v3 (version 3.06b). http://lcamtuf.coredump.cx/p0f3/.