XSS-FP: Browser Fingerprinting using HTML Parser Quirks - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Reports (Research Report) Year : 2012

XSS-FP: Browser Fingerprinting using HTML Parser Quirks

Abstract

There are many scenarios in which inferring the type of a client browser is desirable, for instance to fight against session stealing. This is known as browser fingerprinting. This paper presents and evaluates a novel fingerprinting technique to determine the exact nature (browser type and version, eg Firefox 15) of a web-browser, exploiting HTML parser quirks exercised through XSS. Our experiments show that the exact version of a web browser can be determined with 71\% of accuracy, and that only 6 tests are sufficient to quickly determine the exact family a web browser belongs to.
Fichier principal
Vignette du fichier
article.pdf (389 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-00753926 , version 1 (19-11-2012)

Identifiers

Cite

Erwan Abgrall, Yves Le Traon, Martin Monperrus, Sylvain Gombault, Mario Heiderich, et al.. XSS-FP: Browser Fingerprinting using HTML Parser Quirks. [Research Report] 12888, SnT. 2012. ⟨hal-00753926⟩
351 View
890 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More