Paper Info
Title
Knockin' On Trackers' Door: Large-Scale Automatic Analysis Of Web Tracking
Abstract
In this paper, we present the first generic large-scale analysis of different known and unknown web tracking scripts on the Internet to understand its current ecosystem and their behavior. To this end, we implemented TRACKINGINSPECTOR the first automatic method capable of detecting generically different types of web tracking scripts. This method automatically retrieves the existing scripts from a website and, through code similarity and machine learning, detects modifications of known tracking scripts and discovers unknown tracking script candidates.TRACKINGINSPECTOR analyzed the Alexa top 1M websites, computing the web tracking prevalence and its ecosystem, as well as the influence of hosting, website category, and website reputation. More than 90% websites performed some sort of tracking and more than 50% scripts were used for web tracking. Over 2,000,000 versions of known tracking scripts were found. We discovered several script renaming techniques used to avoid blacklists, performing a comprehensive analysis of them. 5,500,000 completely unknown likely tracking scripts were found, including more than 700 new different potential device fingerprinting unique scripts. Our system also automatically detected the fingerprinting behavior of a previously reported targeted fingerprinting-driven malware campaign in two different websites not previously documented.
Year
DOI
Venue
2018
10.1007/978-3-319-93411-2_13
DETECTION OF INTRUSIONS AND MALWARE, AND VULNERABILITY ASSESSMENT, DIMVA 2018
Keywords
Field
DocType
Device fingerprinting, Privacy, Web tracking
BitTorrent tracker,Computer science,Web tracking,Human–computer interaction,Scripting language,The Internet
Conference
Volume
ISSN
Citations 
10885
0302-9743
1
PageRank 
References 
Authors
0.36
17
2
Name
Order
Citations
PageRank
Iskander Sánchez-Rola1254.03
Igor Santos266445.73