TU Darmstadt / ULB / TUbiblio

Disguised Chromium Browser: Robust browser, Flash and Canvas Fingerprinting Protection

Baumann, Peter ; Katzenbeisser, Stefan ; Stopczynski, Martin ; Tews, Erik (2016)
Disguised Chromium Browser: Robust browser, Flash and Canvas Fingerprinting Protection.
Vienna, Austria
doi: 10.1145/2994620.2994621
Konferenzveröffentlichung, Bibliographie

Kurzbeschreibung (Abstract)

Browser fingerprinting is a widely used technique to uniquely identify web users and to track their online behavior. Until now, different tools have been proposed to protect the user against browser fingerprinting. However, these tools have usability restrictions as they deactivate browser features and plug-ins (like Flash) or the HTML5 canvas element. In addition, all of them only provide limited protection, as they randomize browser settings with unrealistic parameters or have methodical flaws, making them detectable for trackers. In this work we demonstrate the first anti-fingerprinting strategy, which protects against Flash fingerprinting without deactivating it, provides robust and undetectable anti-canvas fingerprinting, and uses a large set of real word data to hide the actual system and browser properties without losing usability. We discuss the methods and weaknesses of existing anti-fingerprinting tools in detail and compare them to our enhanced strategies. Our evaluation against real world fingerprinting tools shows a successful fingerprinting protection in over 99% of 70.000 browser sessions.

Typ des Eintrags: Konferenzveröffentlichung
Erschienen: 2016
Autor(en): Baumann, Peter ; Katzenbeisser, Stefan ; Stopczynski, Martin ; Tews, Erik
Art des Eintrags: Bibliographie
Titel: Disguised Chromium Browser: Robust browser, Flash and Canvas Fingerprinting Protection
Sprache: Deutsch
Publikationsjahr: Oktober 2016
Verlag: ACM
Buchtitel: WPES '16 Proceedings of the 2016 ACM on Workshop on Privacy in the Electronic Society
Veranstaltungsort: Vienna, Austria
DOI: 10.1145/2994620.2994621
Kurzbeschreibung (Abstract):

Browser fingerprinting is a widely used technique to uniquely identify web users and to track their online behavior. Until now, different tools have been proposed to protect the user against browser fingerprinting. However, these tools have usability restrictions as they deactivate browser features and plug-ins (like Flash) or the HTML5 canvas element. In addition, all of them only provide limited protection, as they randomize browser settings with unrealistic parameters or have methodical flaws, making them detectable for trackers. In this work we demonstrate the first anti-fingerprinting strategy, which protects against Flash fingerprinting without deactivating it, provides robust and undetectable anti-canvas fingerprinting, and uses a large set of real word data to hide the actual system and browser properties without losing usability. We discuss the methods and weaknesses of existing anti-fingerprinting tools in detail and compare them to our enhanced strategies. Our evaluation against real world fingerprinting tools shows a successful fingerprinting protection in over 99% of 70.000 browser sessions.

Freie Schlagworte: Browser, Fingerprinting, Canvas, Flash, Privacy, Tracking
ID-Nummer: TUD-CS-2016-14773
Fachbereich(e)/-gebiet(e): Profilbereiche
Profilbereiche > Cybersicherheit (CYSEC)
Hinterlegungsdatum: 14 Aug 2017 12:58
Letzte Änderung: 22 Jan 2019 09:39
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Frage zum Eintrag Frage zum Eintrag

Optionen (nur für Redakteure)
Redaktionelle Details anzeigen Redaktionelle Details anzeigen