The CNAME of the Game: Large-scale Analysis of DNS-based Tracking Evasion
The CNAME of the Game: Large-scale Analysis of DNS-based Tracking Evasion
复制标题
游戏的CNAME：基于DNS的追踪规避大规模分析
DOI：
--
复制
发表时间：
2021
影响因子：
--
通讯作者：
Tom van Goethem
中科院分区：
文献类型：
--
作者：
Yana Dimova;Gunes Acar;Lukasz Olejnik;W. Joosen;Tom van Goethem
摘要在线跟踪是跟踪者和反跟踪机制之间的一场打地鼠游戏，前者通过侵入性数据收集构建行为用户配置文件并将其货币化，后者部署为浏览器扩展、DNS解析程序或内置到浏览器中。作为对无处不在的、不透明的在线跟踪的回应，越来越多的用户采取反跟踪措施来保护自己的隐私。因此，随着追踪者收集的用户信息受到限制，一些追踪者正在寻找规避这些保护的方法。在本文中，我们报告了对一种反跟踪规避方案的大规模纵向评估，该方案利用CNAME记录在同一站点上下文中包括跟踪器资源，该方案有效地绕过了依赖于基于固定主机名的黑名单的反跟踪措施。使用历史的HTTP存档数据，我们发现这种跟踪方案正在迅速获得吸引力，特别是在高流量的网站中。此外，我们还报告了基于CNAME的跟踪的技术设置所固有的几个隐私和安全问题，这些问题是我们通过自动和手动分析的组合检测到的。我们发现一些追踪者正在对Safari浏览器使用这项技术，众所周知，Safari浏览器包含严格的反跟踪配置。我们的发现表明，使用CNAME追踪器的网站必须采取额外的预防措施，以避免将敏感信息泄露给第三方。
Abstract Online tracking is a whack-a-mole game between trackers who build and monetize behavioral user profiles through intrusive data collection, and anti-tracking mechanisms that are deployed as browser extensions, DNS resolvers, or built-in to the browser. As a response to pervasive and opaque online tracking, more and more users adopt anti-tracking measures to preserve their privacy. Consequently, as the information that trackers can gather on users is being curbed, some trackers are looking for ways to evade these protections. In this paper we report on a large-scale longitudinal evaluation of an anti-tracking evasion scheme that leverages CNAME records to include tracker resources in a same-site context, which effectively bypasses anti-tracking measures that rely on fixed hostname-based block lists. Using historical HTTP Archive data we find that this tracking scheme is rapidly gaining traction, especially among high-traffic websites. Furthermore, we report on several privacy and security issues inherent to the technical setup of CNAME-based tracking that we detected through a combination of automated and manual analyses. We find that some trackers are using the technique against the Safari browser, which is known to include strict anti-tracking configurations. Our findings show that websites using CNAME trackers must take extra precautions to avoid leaking sensitive information to third parties.
DOI：
10.1109/sp40001.2021.00017
发表时间：
2020-08
期刊：
2021 IEEE Symposium on Security and Privacy (SP)
影响因子：
--
作者：
Umar Iqbal;Steven Englehardt;Zubair Shafiq
通讯作者：
Umar Iqbal;Steven Englehardt;Zubair Shafiq