Characterization and countermeasure of tracking mechanism on the web

网络跟踪机制的特征及对策

• 批准号: 22KJ3089
• 负责人: DAO THI THU HA
• 金额: $ 1.09万
• 依托单位: National Institute of Informatics
• 依托单位国家: 日本
• 项目类别: Grant-in-Aid for JSPS Fellows
• 财政年份: 2023
• 资助国家: 日本
• 起止时间: 2023-03-08 至 2024-03-31
• 项目状态: 已结题
• 来源: https://kaken.nii.ac.jp/en/grant/KAKENHI-PROJECT-22KJ3089/
• 关键词: OBA; web tracking; PII leakage

The advertisement and tracking ecosystem has substantially grown in the last 10 years, building on standard and more advanced web tracking technologies. We identified a tracking mechanism based on PII leakage that allows tracking providers to persistently identify users through cross-site, cross-browser, and cross-device tracking. We analyzed the presence of PII leakage-based tracking and performed an experiment and confirm the Online Behavior Advertising occurring across multiple sites, browsers, and devices based-on PII leakage-based tracking. The preliminary results have been submitted to the IEEE/ACM TNET 2022.Also, we proposed PrivateLOGIN, which enables us to perform a large-scale automation of website login through an Single Sign-On account and analyze privacy leakage in this context. The preliminary results were presented in the ACM AINTEC poster 2022 and have been submitted to the IEEE/IFIP TMA 2023.In addition, universities collect and process a massive amount of Personal Identifiable Information (PII) at registration and throughout interactions with individuals. However, student PII can be exposed to the public by uploading documents along with university notice without consent and awareness, which could put individuals at risk of a variety of different scams, such as identity theft, fraud, or phishing. We performed an in-depth analysis of student PII leakage at Vietnamese universities. The preliminary results have been submitted to the IEICE Transactions on Information and Systems 2023.

广告和跟踪生态系统在过去10年中大幅增长，建立在标准和更先进的网络跟踪技术基础上。我们确定了一种基于PII泄漏的跟踪机制，该机制允许跟踪提供商通过跨站点、跨浏览器和跨设备跟踪来持续识别用户。我们分析了基于PII泄漏的跟踪的存在，并进行了实验，并确认了基于PII泄漏的跟踪在多个网站，浏览器和设备上发生的在线行为广告。初步结果已提交给IEEE/ACM TNET 2022。此外，我们提出了PrivateLOGIN，它使我们能够通过单点登录帐户执行大规模的网站登录自动化，并在此背景下分析隐私泄漏。初步结果已在ACM AINTEC海报2022中展示，并已提交给IEEE/IFIP TMA 2023。此外，大学在注册和与个人互动时收集和处理大量的个人身份信息（PII）。但是，学生的PII可能会在未经同意和不知情的情况下随大学通知一起沿着上传文档而暴露给公众，这可能会使个人面临各种不同的诈骗风险，例如身份盗窃、欺诈或网络钓鱼。我们对越南大学的学生PII泄漏进行了深入分析。初步结果已提交给IEICE Transactions on Information and Systems 2023。