PriVaricator: Deceiving fingerprinters with little white lies
File(s)www15.pdf (5.53 MB)
Accepted version
Author(s)
Nikiforakis, Nick
Joosen, Wouter
Livshits, Benjamin
Type
Conference Paper
Abstract
Researchers have shown that, in recent years, unwanted web tracking is on the rise, with browser-based fingerprinting being adopted by more and more websites as a viable alternative to third-party cookies. In this paper we propose PriVaricator, a solution to the problem of browser-based fingerprinting. A key insight is that when it comes to web tracking, the real problem with fingerprinting is not uniqueness of a fingerprint, it is linkability, i.e., the ability to connect the same fingerprint across multiple visits. Thus, making fingerprints non-deterministic also makes them hard to link across browsing sessions. In PriVaricator we use the power of randomization to "break" linkability by exploring a space of parameterized randomization policies. We evaluate our techniques in terms of being able to prevent fingerprinting and not breaking existing (benign) sites. The best of our randomization policies renders all the fingerprinters we tested ineffective, while causing minimal damage on a set of 1000 Alexa sites on which we tested, with no noticeable performance overhead.
Date Issued
2015-05-18
Date Acceptance
2015-05-18
Citation
Proceedings of the 24th International Conference on World Wide Web - WWW '15, 2015
ISBN
9781450334693
Publisher
ACM Press
Journal / Book Title
Proceedings of the 24th International Conference on World Wide Web - WWW '15
Copyright Statement
© 2015 Association for Computing Machinery (ACM).
Source
24th International Conference on World Wide Web
Publication Status
Published
Start Date
2015-05-18
Finish Date
2015-05-22
Coverage Spatial
Florence, Italy