SurroundWeb: Mitigating privacy concerns in a 3D web browser

Proceedings - IEEE Symposium on Security and Privacy

Volumn 2015-July, Issue , 2015, Pages 431-446

  Vilk, John ^a   Molnar, David ^b   Livshits, Benjamin ^b   Ofek, Eyal ^b   Rossbach, Chris ^c   Moshchuk, Alexander ^d   Wang, Helen J ^b   Gal, Ran ^b  

^a UNIVERSITY OF MASSACHUSETTS   (United States)

^b MICROSOFT RESEARCH   (United States)

^c VMWARE INC   (United States)

^d GOOGLE INC   (United States)

Author keywords

augmented reality; JavaScript; projection mapping; web browser

Indexed keywords

ABSTRACTING; AUGMENTED REALITY; DISPLAY DEVICES; HUMAN COMPUTER INTERACTION; WEB BROWSERS;

ACCEPTABLE PERFORMANCE; DISPLAY INTERFACES; HIGH LEVEL INTERFACE; IMMERSIVE RENDERING; JAVASCRIPT; PHYSICAL DIMENSIONS; REAL-WORLD OBJECTS; RECENT RESEARCHES;

THREE DIMENSIONAL COMPUTER GRAPHICS;

EID: 84945183726     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2015.33     Document Type: Conference Paper

References (38)

1. G. Acar, M. Juarez, N. Nikiforakis, C. Diaz, S. Gürses, F. Piessens, and B. Preneel. FPDetective: Dusting the Web for Fingerprinters. In Proceedings of the Conference on Computer & Communications Security, 2013.
2. P. Baudisch, N. Good, and P. Stewart. Focus plus context screens: Combining display technology with visualization techniques. In Proceedings of the Symposium on User Interface Software and Technology, 2001.
3. J. Birnholtz, L. Reynolds, E. Luxenberg, C. Gutwin, and M. Mustafa. Awareness beyond the desktop: exploring attention and distraction with a projected peripheral-vision display. In Proceedings of Graphics Interface, 2010.
4. P. Chapman and D. Evans. Automated black-box detection of side-channel vulnerabilities in web applications. In Proceedings of the Conference on Computer and Communications Security, 2011.
5. L. D'Antoni, A. M. Dunn, S. Jana, T. Kohno, B. Livshits, D. Molnar, A. Moshchuk, E. Ofek, F. Roesner, S. Saponas, M. Veanes, and H. J. Wang. Operating System Support for Augmented Reality Applications. In Workshop on Hot Topics in Operating Systems, 2013.
6. P. Eckersley. How Unique Is Your Browser? In Proceedings of the Privacy Enhancing Technologies Symposium, 2010.
7. B. M. et al. Argon Mobile Web Browser, 2013. https://research.cc.gatech.edu/kharma/.
8. E. Flood and J. Karlsson. Browser Fingerprinting. Master of Science Thesis, Chalmers Univesity of Technology, 2012.
9. S. Guha, B. Cheng, and P. Francis. Privad: Practical Privacy in Online Advertising. In Proceedings of the Symposium on Networked Systems Design and Implementation, 2011.
10. R. Hansen and J. Grossman. Clickjacking. http://www.sectheory.com/clickjacking.htm.
11. S. Jana, D. Molnar, A. Moshchuk, A. Dunn, B. Livshits, H. J. Wang, and E. Ofek. Enabling fine-grained permissions for augmented reality applications with recognizers. In Proceedings of the USENIX Security Symposium, 2013.
12. S. Jana, A. Narayanan, and V. Shmatikov. A Scanner Darkly: Privacy for Perceptual Applications. In Proceedings of the IEEE Symposium on Security and Privacy, 2013.
13. B. R. Jones, H. Benko, E. Ofek, and A. D. Wilson. IllumiRoom: Peripheral Projected Illusions for Interactive Experiences. In Proceedings of the Conference on Human Factors in Computing Systems, 2013.
14. Layar. Layar Solutions, 2015. https://www.layar.com/solutions/.
15. S. Lee, E. L. Wong, D. Goel, M. Dahlin, and V. Shmatikov. Box: A Platform for Privacy-Preserving Apps. In Proceedings of the Symposium on Networked Systems Design and Implementation, 2013.
16. B. Liang, W. You, L. Liu, W. Shi, and M. Heiderich. Scriptless timing attacks on web browser privacy. In Proceedings of the IEEE/IFIP International Conference on Dependable Systems and Networks, 2014.
17. J. R. Mayer. Any person. a pamphleteer. Senior Thesis, Stanford University, 2009.
18. M. L. Mazurek, J. P. Arsenault, J. Bresee, N. Gupta, I. Ion, C. Johns, D. Lee, Y. Liang, J. Olsen, B. Salmon, R. Shay, K. Vaniea, L. Bauer, L. F. Cranor, G. R. Ganger, and M. K. Reiter. Access Control for Home Data Sharing: Attitudes, Needs and Practices. In Proceedings of the Conference on Human Factors in Computing Systems, 2010.
19. Microsoft Corporation. Kinect for Windows SDK, 2013. http://www.microsoft.com/en-us/kinectforwindows/.
20. Microsoft Corporation. Xbox SmartGlass, 2014. http://www.xbox.com/en-US/SMARTGLASS.
21. D. Molnar, E. Ofek, and Microsoft Corporation. SurroundWeb: Spreading the Web to Multiple Screens. http://research. microsoft.com/apps/video/?id=212669.
22. R. A. Newcombe, S. Izadi, O. Hilliges, D. Molyneaux, D. Kim, A. J. Davison, P. Kohli, J. Shotton, S. Hodges, and A. Fitzgibbon. KinectFusion: Real-time dense surface mapping and tracking. In Proceedings of the IEEE International Symposium on Mixed and Augmented Reality, 2011.
23. N. Nikiforakis, W. Joosen, and B. Livshits. PriVaricator: Deceiving Fingerprinters with Little White Lies. In Proceedings of the International World Wide Web Conference, 2015.
24. N. Nikiforakis, A. Kapravelos, W. Joosen, C. Kruegel, F. Piessens, and G. Vigna. Cookieless Monster: Exploring the Ecosystem of Web-based Device Fingerprinting. In Proceedings of the IEEE Symposium on Security and Privacy, 2013.
25. K. Parrish. Kinect for Windows, Ubi Turns Any Surface into Touch Screen, 2013. http://www.tomshardware.com/news/kinect-ubi-touch-screen-windows-8-projector, 23887. html.
26. F. Roesner, D. Molnar, A. Moshchuk, T. Kohno, and H. J. Wang. World-Driven Access Control. In Proceedings of the Conference on Computer and Communications Security, 2014.
27. D. Sehr, R. Muth, C. Biffle, V. Khimenko, E. Pasko, K. Schimpf, B. Yee, and B. Chen. Adapting Software Fault Isolation to Contemporary CPU Architectures. In Proceedings of the USENIX Security Symposium, 2010.
28. L. Shapira, R. Gal, E. Ofek, and P. Kohli. FLARE: Fast Layout for Augmented Reality Applications. In Proceedings of the IEEE International Symposium on Mixed and Augmented Reality, 2014.
29. R. M. Smith. The Web Bug FAQ, 1999. https://w2.eff.org/Privacy/Marketing/web-bug.html.
30. S. Stamm. Plugging the CSS History Leak, 2010. http://mzl. la/1mzshEY.
31. R. Taylor. Internet everywhere? How the web could be on every surface of a room. http://www.bbc.com/news/technology-27243375.
32. V. Toubiana, A. Narayanan, D. Boneh, H. Nissenbaum, and S. Barocas. Adnostic: Privacy Preserving Targeted Advertising. In Proceedings of the Network and Distributed System Security Symposium, 2010.
33. uSample. Instant.ly survey creator, 2013. http://instant.ly.
34. K. Vaniea, L. Bauer, L. F. Cranor, and M. K. Reiter. Out of sight, out of mind: Effects of displaying access-control information near the item it controls. In Proceedings of the IEEE Conference on Privacy, Security and Trust, 2012.
35. V. Vasilyev. fingerprintjs library. https://github.com/Valve/fingerprintjs, 2013.
36. Z. Weinberg, E. Y. Chen, P. R. Jayaraman, and C. Jackson. I Still Know What You Visited Last Summer. In Proceedings of the IEEE Symposium on Security and Privacy, 2011.
37. J. Yang and D. Wigdor. Panelrama: Enabling easy specification of cross-device web applications. In Proceedings of the Conference on Human Factors in Computing Systems, 2014.
38. T.-F. Yen, Y. Xie, F. Yu, R. P. Yu, and M. Abadi. Host Fingerprinting and Tracking on the Web: Privacy and Security Implications. In Proceedings of the Network and Distributed System Security Symposium, 2012.