DocumentCode :
1607934
Title :
Mitigating Browser Fingerprint Tracking: Multi-level Reconfiguration and Diversification
Author :
Laperdrix, Pierre ; Rudametkin, Walter ; Baudry, Benoit
Author_Institution :
INSA-Rennes, Rennes, France
fYear :
2015
Firstpage :
98
Lastpage :
108
Abstract :
The diversity of software components (e.g., Browsers, plugins, fonts) is a wonderful opportunity for users to customize their platforms. Yet, massive customization creates a privacy issue: browsers are slightly different from one another, allowing third parties to collect unique and stable fingerprints to track users. Although software diversity appears to be the source of this privacy issue, we claim that this same diversity, combined with automatic reconfiguration, provides the essential ingredients to constantly change browsing platforms. Constant change acts as a moving target defense strategy against fingerprint tracking by breaking one essential property: stability over time. We leverage virtualization and modular architectures to automatically assemble and reconfigure software components at multiple levels. We operate on operating systems, browsers, fonts and plugins. This work is the first application of software reconfiguration to build a moving target defense against browser fingerprint tracking. The main objective is to automatically modify the fingerprint a platform exhibits. We have developed a prototype called Blink to experiment the effectiveness of our approach at randomizing fingerprints. We have assembled and reconfigured thousands of platforms, and we observe that all of them exhibit different fingerprints, and that commercial fingerprinting solutions are not able to detect that the different platforms actually correspond to a single user.
Keywords :
data privacy; online front-ends; operating systems (computers); program assemblers; software architecture; virtualisation; Blink; browser fingerprint tracking mitigation; moving target defense strategy; multilevel diversification; multilevel software reconfiguration; operating systems; software architectures; software component diversity; Browsers; Computer architecture; Fingerprint recognition; Measurement; Operating systems; Privacy;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Software Engineering for Adaptive and Self-Managing Systems (SEAMS), 2015 IEEE/ACM 10th International Symposium on
Conference_Location :
Florence
Type :
conf
DOI :
10.1109/SEAMS.2015.18
Filename :
7194664
Link To Document :
بازگشت