权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

Collaborative Research: SaTC: CORE: Medium: Defending against Emerging Stateless Web Tracking

协作研究：SaTC：核心：中：防御新兴的无状态网络跟踪

基本信息

批准号：
2138138
负责人：
Alexandros Kapravelos
金额：
$ 79.9万
依托单位：
North Carolina State University
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2022
资助国家：
美国
起止时间：
2022-06-15 至 2026-05-31
项目状态：
未结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=2138138&HistoricalAwards=false
关键词：
Collaborative Research SaTC CORE Medium

项目摘要

The web is continuously evolving to support new features and accommodate the constantly-changing demands of users and web applications. At the same time, the online behavioral advertising ecosystem exploits these emerging features for privacy-invasive tracking of web users. Traditionally, tracking on the web has been abusing browser features such as cookies, but new advanced web tracking techniques (browser fingerprinting) are emerging. Browser fingerprinting techniques capitalize on users having subtle differences in their browser configurations that make them identifiable. The project’s novelties are to advance the current state of knowledge of web tracking and how we can defend against it. The project's broader significance and importance are to enhance the privacy of millions of users by improving countermeasures against web tracking that can be deployed in mainstream and privacy-focused web browsers. The main goal of this project is to fundamentally change the detection and defense against stateless web tracking. Unlike prior work that relies on manual or ad-hoc approaches, this project takes a principled approach that leverages browser instrumentation to build signatures of usage of web APIs, the building blocks of browser fingerprinting. The project builds machine learning techniques to improve stateless tracking detection and to quantify the privacy risks of different web APIs. Furthermore, the state-of-the-art approaches to counter stateless tracking are ineffective and brittle in the face of adversarial tactics and also degrade user experience due to their coarse-grained and opaque nature. This project mitigates fingerprinting behavior with fine-grained techniques and infers the intent behind the usage of web APIs, thus enforcing the right mitigation at the right time to minimize the breakage of legitimate functionality. The project also makes the machine learning decisions explainable to better inform users and browser vendors of the progress of stateless tracking on the web.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

web正在不断发展，以支持新功能，并适应用户和web应用程序不断变化的需求。与此同时，在线行为广告生态系统利用这些新兴功能对网络用户进行侵犯隐私的跟踪。传统上，网络追踪一直在滥用浏览器的功能，比如cookies，但是新的先进的网络追踪技术（浏览器指纹识别）正在出现。浏览器指纹识别技术利用用户在浏览器配置上的细微差异来识别他们。这个项目的新奇之处在于，它提高了当前网络跟踪的知识水平，以及我们如何防范它。该项目更广泛的意义和重要性在于，通过改进可部署在主流和以隐私为重点的web浏览器中的针对网络跟踪的对策，增强数百万用户的隐私。该项目的主要目标是从根本上改变对无状态web跟踪的检测和防御。与之前依赖于手工或特别方法的工作不同，这个项目采用了一种有原则的方法，利用浏览器工具来构建web api使用的签名，这是浏览器指纹的构建块。该项目构建了机器学习技术，以改进无状态跟踪检测，并量化不同web api的隐私风险。此外，最先进的反无状态跟踪方法在面对对抗性策略时是无效和脆弱的，并且由于其粗粒度和不透明的性质而降低了用户体验。该项目使用细粒度技术缓解指纹行为，并推断web api使用背后的意图，从而在正确的时间执行正确的缓解措施，以最大限度地减少合法功能的破坏。该项目还使机器学习决策具有可解释性，以便更好地向用户和浏览器供应商通报网络上无状态跟踪的进展。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。