Crossing Cross-Domain Paths in the Current Web
Crossing Cross-Domain Paths in the Current Web
复制标题
当前Web中的跨域路径
DOI：
10.1109/pst.2018.8514163
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Ville Leppänen
中科院分区：
文献类型：
--
作者：
Jukka Ruohonen;Joonas Salovaara;Ville Leppänen
从第三方加载资源引起了对当前万维网的新的安全和隐私问题。基于强制信任和隐式信任的概念，本文研究了跨域传输控制协议（TCP）连接，这些连接是向Web浏览器查询的域以外的域发起的。该数据集涵盖了近万个域名和超过30万个TCP连接，这些连接是通过查询流行的芬兰网站和全球流行的网站发起的。根据结果，（i）跨域连接在当前Web中非常普遍。(ii)大多数跨域连接都传输加密的内容，尽管混合内容传输相对常见;许多跨域连接同时传输未加密的内容。(iii)许多跨域连接是从已知的网络广告域发起的，但更大的份额追溯到社交媒体平台和云基础设施。最后，㈣芬兰网站抽样结果与全球流行网站略有不同。有了这些结果，本文有助于更好地理解在万维网的跨域连接和依赖正在进行的工作。
The loading of resources from third-parties has evoked new security and privacy concerns about the current world wide web. Building on the concepts of forced and implicit trust, this paper examines cross-domain transmission control protocol (TCP) connections that are initiated to domains other than the domain queried with a web browser. The dataset covers nearly ten thousand domains and over three hundred thousand TCP connections initiated by querying popular Finnish websites and globally popular sites. According to the results, (i) crossdomain connections are extremely common in the current Web. (ii) Most of these transmit encrypted content, although mixed content delivery is relatively common; many of the cross-domain connections deliver unencrypted content at the same time. (iii) Many of the cross-domain connections are initiated to known web advertisement domains, but a much larger share traces to social media platforms and cloud infrastructures. Finally, (iv) the results differ slightly between the Finnish web sites sampled and the globally popular sites. With these results, the paper contributes to the ongoing work for better understanding crossdomain connections and dependencies in the world wide web.