TC: Small: Understanding and Taming the Web's Privacy Footprint

在过去的十年中，万维网开发了一个独特的第三方服务生态系统，包括广告、网络分析的活动内容和紧密集成的应用程序编程接口。 这些第三方工具收集了大量信息，其规模和影响在很大程度上不为公众所知，即使是专家也难以衡量。用户上网对其隐私的影响以前没有从最自然的角度，即用户本身的角度进行过研究。 这项研究旨在通过关注用户的实际网络行为、他们为保护隐私而采取的任何现有对策、泄露的信息量以及这对第三方服务的分析能力的影响来缩小这一差距。为了测量信息泄露，将通过每个可识别用户的匿名图片（包括浏览器详细信息）来检查真实网络冲浪流量，为保护他或她的隐私而采取的任何对策，以及所涉及的第三方观察到的cookie，转介和网络访问。 接下来，分析策略将被检查，反映不同Vantage和意图，反映第三方的能力，访问有关用户的网上冲浪的信息。 最后，将开发一个浏览器扩展，不仅告知用户他们当前的网络冲浪正在向哪些方提供信息，而且还通过允许第三方服务正常运行的细粒度策略执行来积极减少隐私泄露。

Over the past decade, the World-Wide Web has developed a unique ecosystem of third-party services, including advertisements, active content for web analytics, and tightly integrated application programming interfaces. These third-party tools collect large amounts of information, the scale and implications of which are largely unknown to the public and difficult to gauge even for even experts. The implication of users' web-surfing on their privacy has not previously been studied from the most natural perspective, namely that of the users themselves. This research aims to close this gap by focusing on users' actual web behavior, any existing countermeasures they employ to safeguard their privacy, the amount of information leaked, and the implications this has for the profiling capabilities of third-party services.To measure information leakage, real-world web-surfing traffic will be examined through an anonymized picture of each discernible user, including browser details, any countermeasures taken to safeguard his or her privacy, and the cookies, referrals, and web visits as observed by the third parties involved. Next, profiling strategies will be examined that reflect different vantage points and intent, mirroring the capabilities of third parties with access to information about the users' web surfing. Finally, a browser extension will be developed that not only informs users about the parties their current web-surfing is providing information to, but also actively minimizes privacy leaks via fine grained policy enforcement that allows third-party services to function correctly.