TC: Small: Understanding and Taming the Web's Privacy Footprint

TC：小：理解和控制网络的隐私足迹

• 批准号: 1015835
• 负责人: Nicholas Weaver
• 金额: $ 50万
• 依托单位: International Computer Science Institute
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-08-01 至 2014-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1015835&HistoricalAwards=false
• 关键词: TC; Small; Understanding; Taming; Web

Over the past decade, the World-Wide Web has developed a unique ecosystem of third-party services, including advertisements, active content for web analytics, and tightly integrated application programming interfaces. These third-party tools collect large amounts of information, the scale and implications of which are largely unknown to the public and difficult to gauge even for even experts. The implication of users' web-surfing on their privacy has not previously been studied from the most natural perspective, namely that of the users themselves. This research aims to close this gap by focusing on users' actual web behavior, any existing countermeasures they employ to safeguard their privacy, the amount of information leaked, and the implications this has for the profiling capabilities of third-party services.To measure information leakage, real-world web-surfing traffic will be examined through an anonymized picture of each discernible user, including browser details, any countermeasures taken to safeguard his or her privacy, and the cookies, referrals, and web visits as observed by the third parties involved. Next, profiling strategies will be examined that reflect different vantage points and intent, mirroring the capabilities of third parties with access to information about the users' web surfing. Finally, a browser extension will be developed that not only informs users about the parties their current web-surfing is providing information to, but also actively minimizes privacy leaks via fine grained policy enforcement that allows third-party services to function correctly.

在过去的十年中，万维网发展了一个独特的第三方服务生态系统，包括广告、用于网络分析的活动内容和紧密集成的应用程序编程接口。这些第三方工具收集了大量信息，其规模和影响在很大程度上是公众所不知道的，即使是专家也很难衡量。以前还没有人从最自然的角度，即用户本身的角度来研究用户上网对其隐私的影响。这项研究旨在通过关注用户的实际网络行为、他们用来保护隐私的任何现有对策、泄露的信息量以及这对第三方服务分析能力的影响来缩小这一差距。为了衡量信息泄露，将通过每个可识别用户的匿名图片来检查真实世界的网络冲浪流量，包括浏览器详细信息、为保护其隐私而采取的任何对策，以及参与其中的第三方观察到的Cookie、推荐和网络访问。接下来，将研究反映不同优势点和意图的侧写策略，反映第三方访问用户网上冲浪信息的能力。最后，将开发一个浏览器扩展，它不仅通知用户他们当前的网络冲浪向哪些方提供信息，而且通过允许第三方服务正常运行的细粒度策略执行，积极地将隐私泄露降至最低。