TWC: Small: Online tracking: Threat Detection, Measurement and Response

TWC：小型：在线跟踪：威胁检测、测量和响应

• 批准号: 1526353
• 负责人: Arvind Narayanan
• 金额: $ 50万
• 依托单位: Princeton University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-07-01 至 2018-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1526353&HistoricalAwards=false
• 关键词: TWC; Small; Online; tracking; Threat

The project develops new technologies for continual, web-scale measurement and rapid defenses against emerging threats to web privacy and security arising from third-party tracking. It draws from the fields of web security, systems, measurement, statistics, and machine learning. The outputs of this project will enable website administrators to find and fix a large class of privacy and security problems. They will help improve existing browser privacy tools. Finally, they will aid regulatory enforcement and contribute to better-informed press reporting on online privacy and security. This project is driven by two fundamental questions: (i) which privacy and security threats are created or exacerbated by the presence of embedded third party elements? and (ii) how can we automatically detect these problems and develop defensive tools for users and site administrators? The project uses automated web browsing and measurement to generate "third-party threat profiles" for websites, maintain a "web privacy census," and develop a new class of browser privacy tools using machine learning. The project brings transparency to the third-party ecosystem and enables oversight, giving users and developers the upper hand in blocking unwanted tracking and supporting enforcement actions when companies violate established privacy rules.

该项目开发新技术，用于持续的网络规模测量和快速防御第三方跟踪对网络隐私和安全产生的新威胁。它借鉴了网络安全、系统、测量、统计和机器学习等领域。该项目的成果将使网站管理员能够发现并解决大量隐私和安全问题。它们将有助于改进现有的浏览器隐私工具。最后，它们将有助于监管执法，并有助于更好地报道在线隐私和安全。这个项目是由两个基本问题驱动的：(i)嵌入式第三方元素的存在会造成或加剧哪些隐私和安全威胁？（ii）我们如何自动检测这些问题并为用户和站点管理员开发防御工具？该项目使用自动网络浏览和测量为网站生成“第三方威胁配置文件”，维护“网络隐私普查”，并使用机器学习开发一类新的浏览器隐私工具。该项目为第三方生态系统带来了透明度，并实现了监督，让用户和开发人员在阻止不必要的跟踪和支持公司违反既定隐私规则时采取执法行动方面占据上风。