User Tracking on the Web via Cross-Browser Fingerprinting
User Tracking on the Web via Cross-Browser Fingerprinting
复制标题
DOI：
10.1007/978-3-642-29615-4_4
复制
发表时间：
2011-10
期刊：
影响因子：
--
通讯作者：
Károly Boda;Á. Földes;G. Gulyás;S. Imre
中科院分区：
文献类型：
--
作者：
Károly Boda;Á. Földes;G. Gulyás;S. Imre
自从万维网诞生以来，通过网络浏览器跟踪用户的技术已经有了很大的发展，带来了越来越大的隐私风险。这些方法中的一个重要分支，称为指纹识别，正受到越来越多的关注，因为它不依赖于客户端信息存储，而不是类似cookie的技术。本文提出了一种新的、独立于浏览器的指纹识别方法。我们已经在一个近千条记录的数据集上进行了测试，这些记录是通过一个可公开访问的测试网站收集的。我们已经证明，IP地址的一部分、特定字体集的可用性、时区和屏幕分辨率足以唯一地识别五种最流行的Web浏览器的大多数用户，并且用户代理字符串是浏览器实例的相当有效但脆弱的标识符。
The techniques of tracking users through their web browsers have greatly evolved since the birth of the World Wide Web, posing an increasingly significant privacy risk. An important branch of these methods, called fingerprinting, is getting more and more attention, because it does not rely on client-side information storage, in contrast to cookie-like techniques. In this paper, we propose a new, browser-independent fingerprinting method. We have tested it on a data set of almost a thousand records, collected through a publicly accessible test website. We have shown that a part of the IP address, the availability of a specific font set, the time zone, and the screen resolution are enough to uniquely identify most users of the five most popular web browsers, and that user agent strings are fairly effective but fragile identifiers of a browser instance.