Towards accurate detection of obfuscated web tracking
Visualitza/Obre
Cita com:
hdl:2117/114400
Tipus de documentText en actes de congrés
Data publicació2017
EditorInstitute of Electrical and Electronics Engineers (IEEE)
Condicions d'accésAccés obert
Tots els drets reservats. Aquesta obra està protegida pels drets de propietat intel·lectual i
industrial corresponents. Sense perjudici de les exempcions legals existents, queda prohibida la seva
reproducció, distribució, comunicació pública o transformació sense l'autorització del titular dels drets
ProjecteINFRAESTRUCTURA DE RED SOSTENIBLE PARA LA FUTURA SOCIEDAD DIGITAL (MINECO-TEC2014-59583-C2-2-R)
Abstract
Web tracking is currently recognized as one of the most important privacy threats on the Internet. Over the last years, many methodologies have been developed to uncover web trackers. Most of them are based on static code analysis and the use of predefined blacklists. However, our main hypothesis is that web tracking has started to use obfuscated programming, a transformation of code that renders previous detection methodologies ineffective and easy to evade. In this paper, we propose a new methodology based on dynamic code analysis that monitors the actual JavaScript calls made by the browser and compares them to the original source code of the website in order to detect obfuscated tracking. The main advantage of this approach is that detection cannot be evaded by code obfuscation. We applied this methodology to detect the use of canvas-font tracking and canvas fingerprinting on the top-10K most visited websites according to Alexa's ranking. Canvas-based tracking is a fingerprinting method based on JavaScript that uses the HTML5 canvas element to uniquely identify a user. Our results show that 10.44% of the top-10K websites use canvas-based tracking (canvas-font and canvas fingerprinting), while obfuscation was used in 2.25% of them. These results confirm our initial hypothesis that obfuscated programming in web tracking is already in use. Finally, we argue that canvas-based tracking can be more present in secondary pages than in the home page of websites.
CitacióLe, H., Fallace, F., Barlet, P. Towards accurate detection of obfuscated web tracking. A: IEEE International Workshop on Measurements and Networking. "2017 IEEE International Workshop on Measurements and Networking: 2017 proceedings papers". Nàpols: Institute of Electrical and Electronics Engineers (IEEE), 2017, p. 1-6.
ISBN978-1-5090-5679-8
Versió de l'editorhttps://doi.org/10.1109/IWMN.2017.8078365
Fitxers | Descripció | Mida | Format | Visualitza |
---|---|---|---|---|
canvas-fingerprinting.mn2017.pdf | 335,4Kb | Visualitza/Obre |