Research on link detection technology based on dynamic browser fingerprint

Fan GAO; Jian WANG; Jiqiang LIU

doi:10.11959/j.issn.2096-109x.2022049

您当前的位置：

首页 >

文章列表页 >

Research on link detection technology based on dynamic browser fingerprint

Papers | 更新时间：2024-06-03

- Research on link detection technology based on dynamic browser fingerprint
- Chinese Journal of Network and Information Security Vol. 8, Issue 4, Pages: 144-156(2022)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2022049
  CLC： TP393
- Online First：2022-08，
  
  Published：15 August 2022
- 稿件说明：
移动端阅览
Fan GAO, Jian WANG, Jiqiang LIU. Research on link detection technology based on dynamic browser fingerprint[J]. Chinese Journal of Network and Information Security, 2022, 8(4): 144-156.
DOI：

Fan GAO, Jian WANG, Jiqiang LIU. Research on link detection technology based on dynamic browser fingerprint[J]. Chinese Journal of Network and Information Security, 2022, 8(4): 144-156. DOI： 10.11959/j.issn.2096-109x.2022049.

摘要

随着用户隐私泄露和网络欺诈问题的出现，传统检测机制已经不能阻挡愈演愈烈的攻击行为，需要新的技术手段辅助进行 Web 安全检测。作为沟通用户与网络数据的桥梁，浏览器广泛应用于用户与各种应用程序之间的交互，其中浏览器指纹包含用户浏览器及设备等多种特征信息，其独特性可以极大地提高用户识别的准确率。但是浏览器指纹随时间不断发生变动，基于静态指纹的研究方案难以满足动态指纹检测的要求。针对这一问题，为了提高动态浏览器指纹的识别和链接检测能力，从多维角度获取参数并进行筛选，得到细粒度和高区分度的特征进行指纹检测，防止过多不必要参数带来的运算代价，并将双向门控循环单元（BiGRU，bidirectional gating recurrent unit）引入指纹检测工作中，提出了基于堆叠BiGRU的动态浏览器指纹链接检测模型，解决了指纹检测过程中忽略前后向信息交互导致的检测精度不高的问题，在准确率和链接时长等指标上有了一定的提升。进而针对不同特征参数的重要性不同，赋予相同权重会造成检测误差的问题，结合注意力机制聚焦稳定性更强的指纹特征，提出了基于Att-BiGRU的动态浏览器指纹链接检测模型，较堆叠BiGRU 有了检测能力上的优化，进一步提高了浏览器指纹的检测准确率，并在与基准模型的综合指标对比结果中表现出了良好的链接能力。

Abstract

With the emergence of user privacy leakage and online fraud

traditional detection mechanisms can no longer stop the intensified attacks and new methods are needed to assist in web security detection.As a bridge between users and network data

browsers are widely used in the interaction between users and various applications.The browser fingerprint contains various characteristic information of the user’s browser and device

and its uniqueness can greatly improve the accuracy of user identification.However

browser fingerprints may change over time

and solutions based on static fingerprints cannot meet the requirements of dynamic fingerprints detection.Motivated by this challenge

it’s necessary to improve the recognition and link detection capabilities of dynamic browser fingerprints.Besides

parameters from multi-dimensional perspective need to be obtained and screened to get fine-grained and high-discrimination features for model detecting

preventing the calculation cost caused by too many unnecessary parameters.Bidirectional Gating Recurrent Unit (BiGRU) was introduced into the fingerprint detection

and a stacked BiGRU detection model based on dynamic browser fingerprints was proposed.It solved the problem of low detection accuracy caused by ignoring the interaction of forward and backward information in the process of fingerprints detection

and it also had a certain improvement in indicators such as accuracy and linking time.Furthermore

in view of the different importance of different feature parameters

the same weight given to parameters will result in detection error.Combined with the attention mechanism to focus more stable fingerprint features

an Att-BiGRU fingerprint detection model based on dynamic browser fingerprints was proposed.It optimized the detection ability compared to BiGRU

further improved the detection accuracy of browser fingerprinting

and showed good linking ability on the comprehensive index under the benchmark model.

关键词

Keywords

references

PAPADOPOULOS P , KOURTELLIS N , MARKATOS E P . Cookie Synchronization:everything you always wanted to know but were afraid to ask [C ] // World Wide Web Conference . 2019 : 1432 - 1442 .

XUEHUI H , NISHANTH S . Characterising third PARTY cookie usage in the EU after GDPR [C ] // ACM Conference on Web Science . 2019 : 137 - 141 .

ANDRIAMILANTO N , ALLARD T , GUELVOUIT G L . “Guess who?” large-scale data-centric study of the adequacy of browser fingerprints for web authentication [J ] . Innovative Mobile and Internet Services in Ubiquitous Computing (IMIS) , 2021 , 7 : 161 - 172 .

ECKERSLEY P . How unique is your web browser [C ] // Proceedings of the 2010 Privacy Enhancing Technologies Symposium . 2010 : 1 - 18 .

LAPERDRIX P , NATALIIA B , BENOIT B , et al . Browser fingerprinting:a survey [J ] . ACM Trans , 2020 , 14 ( 2 ): 1 - 33 .

ANDRIAMILANTO N , ALLARD T , GUELVOUIT G L . FPSelect:low-cost browser fingerprints for mitigating dictionary attacks against web authentication mechanisms [C ] // Annual Computer Security Applications Conference (ACSAC '20) . 2020 : 627 - 642 .

TORRES C , HUGO J , SJOUKE M . FP-Block:usable Web privacy by controlling browser fingerprinting [C ] // Proceedings of the 20th European Symposium on Research in Computer Security , 2015 : 3 - 19 .

FIORE U , ANIELLO C , ALFREDO D , et al . Countering browser fingerprinting techniques:constructing a fake profile with Google Chrome [C ] // Proceedings of the 17th International Conference on Network-Based Information Systems . 2014 : 355 - 360 .

LAPERDRIX P , BENOIT B , VIKAS M . FPRandom:randomizing core browser objects to break advanced device fingerprinting techniques [C ] // Proceedings of the 9th International Symposium on Engineering Secure Software and Systems . 2017 : 97 - 114 .

WANG C , DANI J , LI X , et al . Adaptive fingerprinting:website fingerprinting over few encrypted traffic [C ] // Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy (CODASPY '21) . 2021 : 149 - 160 .

Saito . Tor fingerprinting:Tor browser can mitigate browser fingerprinting? [C ] // International Conference on Network-Based Information Systems , 2017 : 504 - 517 .

BURSZTETN E , ARTEM M , TADEK P , et al . Picasso:lightweight device class fingerprinting for Web clients [C ] // Proceedings of the 6th Workshop on Security and Privacy in Smartphones and Mobile Devices . 2016 : 93 - 102 .

FAIZ-RHADEMI A , MOHAMMAD Z , KOMMINIST W . FPGuard:detection and prevention of browser fingerprinting [C ] // Proceedings of the 29th Data and Applications Security and Privacy Conference . 2015 : 293 - 308 .

ROCHET F , KYRIAKOS E , OLIVIER P . SWAT:Seamless Web authentication technology [C ] // Proceedings of the World Wide Web Conference . 2019 : 1579 - 1589 .

LAPERDRIX P , GILDAS A , NICK N . Morellian analysis for browsers:making web authentication stronger with canvas fingerprinting [C ] // Proceedings of the 16th International Conference on Detection of Intrusions and Malware,and Vulnerability Assessment . 2019 : 43 - 66 .

SecurAuth . Device/Browser fingerprinting-heuristic-based authentication [EB ] . 2018 .

Iovation . ClearKey [EB ] . 2018 .

ALACA F , VAN O . Device fingerprinting for augmenting web authentication:Classification and analysis of methods [C ] // Proeedgs of the 32nd Annual Conference on Computer Security Applications . 2016 : 289 - 301 .

VASTEL A , PIERRE L , ROMAIN R . FP-STALKER:tracking browser fingerprint evolutions [C ] // Proceedings of the 39th IEEE Symposium on Security and Privacy . 2018 : 1 - 14 .

LI X , CUI X , WANG X . Constructing browser fingerprint tracking chain based on lstm model [J ] . IEEE . 2018 , 7 : 13 - 18 .

LI S , CAO Y . Who touched my browser fingerprint? a large-scale measurement study and classification of fingerprint dynamics [C ] // Proceedings of the ACM Internet Measurement Conference . 2020 . 370 - 385 .

ANTONIO E , FAJARDO A , MEDINA R . Tracking browser fingerprint using Rule Based Algorithm [C ] // 16th IEEE International Colloquium on Signal Processing ＆ Its Applications (CSPA) . 2020 : 225 - 229 .

Views

625

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Web service threat detection method based on traffic interaction graph analysis

Multi-source forgery detection method based on the fusion of color space features and frequency domain features

Cross-stream attention enhanced central difference convolutional network for CG image detection

Phishing detection algorithm based on attention and feature fusion

Deep learning vulnerability detection method based on optimized inter-procedural semantics of programs

Related Author

Tan Xueshi

Li Hongliang

Liu Jianwei

Peng Hao

Zeng Guangjie

Yu Beiyuan

Wang Jiabao

Li Yang

Related Institution

Qi An Xin Technology Group Inc

School of Computer Science and Engineering, Beihang University

School of Cyber Science and Technology, Beihang University

Institute of Command-and-Control Engineering, Army Engineering University of PLA

Guangdong Key Laboratory of Information Security Technology

⁰