PriVaricator: Deceiving Fingerprinters with little white lies

WWW 2015 - Proceedings of the 24th International Conference on World Wide Web

Volumn , Issue , 2015, Pages 820-830

  Nikiforakis, Nick ^a   Joosen, Wouter ^b   Livshits, Benjamin ^c  

^a Stony Brook University   (United States)

^b UNIVERSITY OF LEUVEN   (Belgium)

^c MICROSOFT RESEARCH   (United States)

Author keywords

Fingerprinting; Randomization; Tracking

Indexed keywords

RANDOM PROCESSES; SURFACE DISCHARGES; WORLD WIDE WEB;

FINGERPRINTING; LINKABILITY; MINIMAL DAMAGE; PARAMETERIZED; RANDOMIZATION; REAL PROBLEMS; THIRD PARTIES;

PALMPRINT RECOGNITION;

EID: 84968765165     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2736277.2741090     Document Type: Conference Paper

References (27)

1. G. Acar, C. Eubank, S. Englehardt, M. Juarez, A. Narayanan, and C. Diaz. In Proceedings of the 21st ACM Conference on Computer and Communications Security (CCS), 2014.
2. G. Acar, M. Juarez, N. Nikiforakis, C. Diaz, S. Gurses, F. Piessens, and B. Preneel. FPDetective: Dusting the Web for fingerprinters. In Proceedings of the ACM Conference on Computer and Communications Security (CCS), 2013.
3. Adblock plus-for annoyance-free web surfing. http://adblockplus.org.
4. J. Angwin. Meet the Online Tracking Device That is Virtually Impossible to Block. http://www.propublica.org/article/meet-The-online-Tracking-device-That-is-virtually-impossible-To-block.
5. D. Baron. Preventing attacks on a user's history through CSS:visited selectors. http://dbaron.org/mozilla/visited-privacy, 2010.
6. F. Besson, N. Bielova, and T. Jensen. Browser Randomisation against Fingerprinting: A Quantitative Information Flow Approach. In Proceedings of the 19th Nordic Conference on Secure IT Systems (NordSec), pages 181-196, 2014.
7. BlueCava. Measuring Mobile Advertising ROI Using BlueCava Device Identification. 2011.
8. K. Boda. Firegloves. http://fingerprint.pet-portal.eu/?menu=6.
9. K. Boda, A. M. Foldes, G. G. Gulyas, and S. Imre. User tracking on the web via cross-browser fingerprinting. In Proceedings of the Nordic Conference on Information Security Technology for Applications (NordSec), 2012.
10. Bitcoin Payment Buttons-Bitcoin Merchant Tools. https://coinbase.com/docs/merchant-Tools/payment-buttons.
11. P. Eckersley. The Panopticlick project. https://panopticlick.eff.org/.
12. P. Eckersley. How Unique Is Your Browser? In Proceedings of the Privacy Enhancing Technologies Symposium (PETS), pages 1-17, 2010.
13. E. Flood and J. Karlsson. Browser fingerprinting, 2012.
14. C. Fournet, N. Swamy, J. Chen, P.-E. Dagand, P.-Y. Strub, and B. Livshits. Fully abstract compilation to javascript. In Proceedings of the Symposium on Principles of Programming Languages (POPL), 2013.
15. iovation. Solving online credit fraud using device identification and reputation. 2007.
16. J. R. Mayer. Any person. a pamphleteer. Senior Thesis, Stanford University, 2009.
17. K. Mowery, D. Bogenreif, S. Yilek, and H. Shacham. Fingerprinting information in JavaScript implementations. In H. Wang, editor, Proceedings of W2SP 2011. IEEE Computer Society, May 2011.
18. K. Mowery and H. Shacham. Pixel perfect: Fingerprinting canvas in HTML5. In Proceedings of the Workshop on Web 2.0 Security and Privacy (W2SP). IEEE Computer Society, May 2012.
19. M. Mulazzani, P. Reschl, M. Huber, M. Leithner, S. Schrittwieser, and E. Weippl. Fast and reliable browser identification with javascript engine fingerprinting. In Web 2.0 Workshop on Security and Privacy (W2SP), May 2013.
20. N. Nikiforakis, A. Kapravelos, W. Joosen, C. Kruegel, F. Piessens, and G. Vigna. Cookieless monster: Exploring the ecosystem of web-based device fingerprinting. In Proceedings of the IEEE Symposium on Security and Privacy, pages 541-555, 2013.
21. L. Olejnik, C. Castelluccia, and A. Janc. Why Johnny Can't Browse in Peace: On the Uniqueness of Web Browsing History Patterns. In Proceedings of the Workshop on Hot Topics in Privacy Enhancing Technologies (HOTPETS).
22. K. Sivaramakrishnan. The Drawbridge Cross Device Matching Technology.
23. ThreatMetrix. Device Fingerprinting and Fraud Protection Whitepaper.
24. Tor: Cross-Origin Fingerprinting Unlinkability. https://www.torproject.org/projects/torbrowser/design/#fingerprinting-linkability.
25. V. Vasilyev. fingerprintjs library. https://github.com/Valve/fingerprintjs, 2013.
26. Z. Weinberg, E. Y. Chen, P. R. Jayaraman, and C. Jackson. I still know what you visited last summer: Leaking browsing history via user interaction and side channel attacks. In Proceedings of the IEEE Symposium on Security and Privacy, 2011.
27. T.-F. Yen, Y. Xie, F. Yu, R. P. Yu, and M. Abadi. Host fingerprinting and tracking on the Web: Privacy and security implications. In Proceddings of the Network and Distributed System Security Symposium (NDSS), 2012.