Fp-Scanner: The Privacy Implications of Browser Fingerprint Inconsistencies
Fp-Scanner: The Privacy Implications of Browser Fingerprint Inconsistencies
复制标题
Fp-Scanner：浏览器指纹不一致的隐私影响
DOI：
--
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Romain Rouvoy
中科院分区：
文献类型：
--
作者：
Antoine Vastel;Pierre Laperdrix;Walter Rudametkin;Romain Rouvoy
通过利用设备和浏览器配置的多样性，浏览器指纹识别成为一种可行的技术，可以在生产中实现无状态用户跟踪。公司和学术界对此采取了广泛的对策。然而，评估这些对策的方式并没有正确评估它们对用户隐私的影响，特别是关于它们可能通过暴露其存在而间接泄漏的信息量。在本文中，我们调查了浏览器指纹识别对策的现状，以研究它们可能在更改的指纹中引入的不一致性，以及这可能如何影响用户隐私。要做到这一点，我们引入FP-SCANNER作为一个新的测试套件，探索浏览器指纹不一致，以检测潜在的改变，我们表明，我们能够检测对策，从他们介绍的不一致。除了发现改变的浏览器指纹，我们证明了FP-SCANNER还可以揭示改变的指纹属性的原始值，如浏览器或操作系统。我们相信，这一结果可以被指纹识别器利用，以更准确地针对浏览器采取对策。
By exploiting the diversity of device and browser configurations, browser fingerprinting established itself as a viable technique to enable stateless user tracking in production. Companies and academic communities have responded with a wide range of countermeasures. However , the way these countermeasures are evaluated does not properly assess their impact on user privacy, in particular regarding the quantity of information they may indirectly leak by revealing their presence. In this paper, we investigate the current state of the art of browser fingerprinting countermeasures to study the inconsistencies they may introduce in altered fingerprints , and how this may impact user privacy. To do so, we introduce FP-SCANNER as a new test suite that explores browser fingerprint inconsistencies to detect potential alterations, and we show that we are capable of detecting countermeasures from the inconsistencies they introduce. Beyond spotting altered browser fingerprints, we demonstrate that FP-SCANNER can also reveal the original value of altered fingerprint attributes, such as the browser or the operating system. We believe that this result can be exploited by fingerprinters to more accurately target browsers with countermeasures.