Characterization and countermeasure of tracking mechanism on the web

点击翻译按钮获取中文摘要

The advertisement and tracking ecosystem has substantially grown in the last 10 years, building on standard and more advanced web tracking technologies. We identified a tracking mechanism based on PII leakage that allows tracking providers to persistently identify users through cross-site, cross-browser, and cross-device tracking. We analyzed the presence of PII leakage-based tracking and performed an experiment and confirm the Online Behavior Advertising occurring across multiple sites, browsers, and devices based-on PII leakage-based tracking. The preliminary results have been submitted to the IEEE/ACM TNET 2022.Also, we proposed PrivateLOGIN, which enables us to perform a large-scale automation of website login through an Single Sign-On account and analyze privacy leakage in this context. The preliminary results were presented in the ACM AINTEC poster 2022 and have been submitted to the IEEE/IFIP TMA 2023.In addition, universities collect and process a massive amount of Personal Identifiable Information (PII) at registration and throughout interactions with individuals. However, student PII can be exposed to the public by uploading documents along with university notice without consent and awareness, which could put individuals at risk of a variety of different scams, such as identity theft, fraud, or phishing. We performed an in-depth analysis of student PII leakage at Vietnamese universities. The preliminary results have been submitted to the IEICE Transactions on Information and Systems 2023.