FP-TESTER: Automated Testing of Browser Fingerprint Resilience - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2018

FP-TESTER: Automated Testing of Browser Fingerprint Resilience

Résumé

Despite recent regulations and growing user awareness , undesired browser tracking is increasing. In addition to cookies, browser fingerprinting is a stateless technique that exploits a device's configuration for tracking purposes. In particular , browser fingerprinting builds on attributes made available from Javascript and HTTP headers to create a unique and stable fingerprint. For example, browser plugins have been heavily exploited by state-of-the-art browser fingerprinters as a rich source of entropy. However, as browser vendors abandon plugins in favor of extensions, fingerprinters will adapt. We present FP-TESTER, an approach to automatically test the effectiveness of browser fingerprinting countermeasure extensions. We implement a testing toolkit to be used by developers to reduce browser fingerprintability. While countermeasures aim to hinder tracking by changing or blocking attributes, they may easily introduce subtle side-effects that make browsers more identifiable , rendering the extensions counterproductive. FP-TESTER reports on the side-effects introduced by the countermeasure, as well as how they impact tracking duration from a fingerprinter's point-of-view. To the best of our knowledge, FP-TESTER is the first tool to assist developers in fighting browser fingerprinting and reducing the exposure of end-users to such privacy leaks.
Fichier principal
Vignette du fichier
fptester.pdf (226.96 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01717158 , version 1 (26-02-2018)

Identifiants

  • HAL Id : hal-01717158 , version 1

Citer

Antoine Vastel, Walter Rudametkin, Romain Rouvoy. FP-TESTER: Automated Testing of Browser Fingerprint Resilience. IWPE 2018 - 4th International Workshop on Privacy Engineering, Apr 2018, London, United Kingdom. pp.1-5. ⟨hal-01717158⟩
655 Consultations
1286 Téléchargements

Partager

Gmail Facebook X LinkedIn More