PriVaricator: Deceiving Fingerprinters with Little White Lies
PriVaricator: Deceiving Fingerprinters with Little White Lies
复制标题
PriVricator：用善意的小谎言欺骗指纹采集者
DOI：
10.1145/2736277.2741090
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
B. Livshits
中科院分区：
文献类型：
--
作者：
Nick Nikiforakis;W. Joosen;B. Livshits
研究人员表明，近年来，不必要的网络跟踪正在上升，越来越多的网站采用基于浏览器的指纹识别作为第三方Cookie的可行替代方案。在本文中，我们提出了PriVaricator，基于浏览器的指纹识别问题的解决方案。一个关键的见解是，当涉及到网络跟踪时，指纹识别的真实的问题不是指纹的唯一性，而是可链接性，即，在多次访问中连接相同指纹的能力。因此，使指纹不确定也使它们难以在浏览会话之间链接。在PriVaricator中，我们通过探索参数化随机化策略的空间，使用随机化的力量来“打破”可链接性。我们评估我们的技术，能够防止指纹和不破坏现有的（良性）网站。我们最好的随机化策略使我们测试的所有指纹识别器无效，同时对我们测试的1000个Alexa网站造成最小的损害，没有明显的性能开销。
Researchers have shown that, in recent years, unwanted web tracking is on the rise, with browser-based fingerprinting being adopted by more and more websites as a viable alternative to third-party cookies. In this paper we propose PriVaricator, a solution to the problem of browser-based fingerprinting. A key insight is that when it comes to web tracking, the real problem with fingerprinting is not uniqueness of a fingerprint, it is linkability, i.e., the ability to connect the same fingerprint across multiple visits. Thus, making fingerprints non-deterministic also makes them hard to link across browsing sessions. In PriVaricator we use the power of randomization to "break" linkability by exploring a space of parameterized randomization policies. We evaluate our techniques in terms of being able to prevent fingerprinting and not breaking existing (benign) sites. The best of our randomization policies renders all the fingerprinters we tested ineffective, while causing minimal damage on a set of 1000 Alexa sites on which we tested, with no noticeable performance overhead.