TWC: Small: Cross-Application and Cross-Platform Tracking of Web Users: Techniques and Countermeasures

TWC：小：Web用户的跨应用和跨平台跟踪：技术和对策

• 批准号: 1527086
• 负责人: Nick Nikiforakis
• 金额: $ 49.92万
• 依托单位: SUNY at Stony Brook
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1527086&HistoricalAwards=false
• 关键词: TWC; Small; Cross; Application; Platform

There are many applications in business and end-user applications where user tracking is part of the core functionality or feature set. However, user tracking can intrude on user privacy and even may lead to online crimes. Recent research has shown that tracking companies have started using advanced web tracking techniques that are more subtle and less transparent than traditional online tracking. The ever increasing adoption of mobile devices further exacerbates the tracking problem since these mobile devices are saturated with personal information while the details of mobile-specific tracking techniques are largely unknown. The project seeks a deeper understanding of the existing and potential technical capabilities and limitations of tracking, and the trade-offs between tracking and privacy. The project will conduct a systematic study of techniques and technologies that are used for tracking web users, starting with new variations of traditional tracking methods and proceeding to advanced and stealthy users and device fingerprinting. The research will involve both in-depth analysis and large-scale measurement studies. The gained knowledge will inform security and privacy research communities of the technical capabilities and limits posed by the next generation of user tracking on mobile devices, paying particular attention to the under-researched area of stateless tracking.

在业务和最终用户应用程序中，有许多应用程序都将用户跟踪作为核心功能或特性集的一部分。然而，用户跟踪可能会侵犯用户隐私，甚至可能导致在线犯罪。最近的研究表明，跟踪公司已经开始使用先进的网络跟踪技术，这些技术比传统的在线跟踪更微妙，更不透明。移动的设备的不断增加的采用进一步加剧了跟踪问题，因为这些移动的设备充满了个人信息，而移动特定跟踪技术的细节在很大程度上是未知的。 该项目旨在更深入地了解跟踪的现有和潜在技术能力和局限性，以及跟踪和隐私之间的权衡。 该项目将对用于跟踪网络用户的技术和技术进行系统研究，从传统跟踪方法的新变化开始，并继续进行先进和隐形的用户和设备指纹识别。研究将涉及深入分析和大规模测量研究。所获得的知识将告知安全和隐私研究社区的技术能力和限制所造成的下一代用户跟踪移动的设备，特别注意研究不足的领域无状态跟踪。

项目成果

Time Does Not Heal All Wounds: A Longitudinal Analysis of Security-Mechanism Support in Mobile Browsers

• DOI: 10.14722/ndss.2019.23149
• 发表时间: 2019
• 期刊: Proceedings 2019 Network and Distributed System Security Symposium
• 作者: Meng Luo;Pierre Laperdrix;N. Honarmand;Nick Nikiforakis

Unnecessarily Identifiable: Quantifying the fingerprintability of browser extensions due to bloat

不必要的可识别：量化由于膨胀而导致的浏览器扩展的指纹识别能力

• 发表时间: 2019
• 期刊: Proceedings of the Web Conference (WWW
• 作者: Starov, Oleksii;Laperdrix, Pierre;Kapravelos, Alexandros;Nikiforakis, Nick
• 通讯作者: Nikiforakis, Nick

Morellian Analysis for Browsers: Making Web Authentication Stronger With Canvas Fingerprinting

浏览器的 Morellian 分析：通过 Canvas 指纹识别增强 Web 身份验证

• 发表时间: 2019
• 期刊: Proceedings of the 16th Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA
• 作者: Laperdrix, Pierre;Avoine, Gildas;Baudry, Benoit;Nikiforakis, Nick
• 通讯作者: Nikiforakis, Nick