Browser Randomisation against Fingerprinting: A Quantitative Information Flow Approach - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

Browser Randomisation against Fingerprinting: A Quantitative Information Flow Approach

Résumé

Web tracking companies use device fingerprinting to distinguish the users of the websites by checking the numerous properties of their machines and web browsers. One way to protect the users' privacy is to make them switch between different machine and browser configurations. We propose a formalisation of this privacy enforcement mechanism. We use information-theoretic channels to model the knowledge of the tracker and the fingerprinting program, and show how to synthesise a randomisation mechanism that defines the distribution of configurations for each user. This mechanism provides a strong guarantee of privacy (the probability of identifying the user is bounded by a given threshold) while maximising usability (the user switches to other configurations rarely). To find an optimal solution, we express the enforcement problem of randomisation by a linear program. We investigate and compare several approaches to randomisation and find that more efficient privacy enforcement would often provide lower usability. Finally, we relax the requirement of knowing the fingerprinting program in advance, by proposing a randomisation mechanism that guarantees privacy for an arbitrary program.

Mots clés

Fichier principal
Vignette du fichier
enforcing_abstract.pdf (4.13 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01081037 , version 1 (06-11-2014)

Identifiants

Citer

Frédéric Besson, Nataliia Bielova, Thomas Jensen. Browser Randomisation against Fingerprinting: A Quantitative Information Flow Approach. Nordic Conference on Secure IT Systems (NordSec 2014), Oct 2014, Tromsø, Norway. ⟨10.1007/978-3-319-11599-3_11⟩. ⟨hal-01081037⟩
772 Consultations
208 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More