Author:
Li Tianyi,Zheng Xiaofeng,Shen Kaiwen,Han Xinhui
Abstract
AbstractBrowser fingerprinting is a practical user tracking technology widely adopted by many real-world websites to potentially track users’ browsing behaviors. By collecting information such as screen resolution, user agent, and WebGL rendered data, the tracker can generate a unique identifier for users without their knowledge, leading to a severe violation of user privacy. Therefore, an effective detection and defense technology for browser fingerprinting is needed to protect user privacy. In this paper, we proposed FPFlow, a dynamic JavaScript taint analysis framework to detect and prevent browser fingerprinting. FPFlow monitors the whole process of browser fingerprinting, including collecting information, generating fingerprinting, and sending it to the remote server. We evaluated FPFlow on TRANCO top 10,000 websites. Our experiments showed that our framework could effectively detect browser fingerprints. We found 66.6% of the websites performing fingerprinting and revealed how browser fingerprinting is applied in real-world websites. We also showed that FPFlow could prevent browser fingerprinting with an acceptable overhead.
Publisher
Springer Nature Singapore
Reference32 articles.
1. Amiunique. https://amiunique.org/fp
2. Firefox’s protection against fingerprinting. https://support.mozilla.org/en-US/kb/firefox-protection-against-fingerprinting
3. JS-beautify. https://github.com/beautify-web/js-beautify
4. mitmproxy. https://mitmproxy.org/
5. Puppeteer. https://pptr.dev/
Cited by
1 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献