基于动态浏览器指纹的链接检测技术研究

高凡; 王健; 刘吉强

doi:10.11959/j.issn.2096-109x.2022049

您当前的位置：

首页 >

文章列表页 >

基于动态浏览器指纹的链接检测技术研究

学术论文 | 更新时间：2024-06-03

- 基于动态浏览器指纹的链接检测技术研究
- Research on link detection technology based on dynamic browser fingerprint
- 网络与信息安全学报 2022年8卷第4期页码：144-156
- 作者机构：
- 作者简介：
  
  [ "高凡（1996− ），女，山东烟台人，北京交通大学硕士生，主要研究方向为网络安全及浏览器检测" ]
  [ "王健（1975− ），男，山东烟台人，博士，北京交通大学副教授、博士生导师，主要研究方向为密码应用及区块链、网络安全" ]
  [ "刘吉强（1973− ），男，山东烟台人，博士，北京交通大学教授、博士生导师，主要研究方向为可信计算、隐私保护、云计算安全" ]
- 基金信息：
  
  国家重点研发计划;The National Key R＆D Program of China(2020YFB2103800)
- DOI：10.11959/j.issn.2096-109x.2022049
  中图分类号： TP393
- 网络首发：2022-08，
  
  纸质出版：2022-08-15
- 稿件说明：
移动端阅览
高凡, 王健, 刘吉强. 基于动态浏览器指纹的链接检测技术研究[J]. 网络与信息安全学报, 2022,8(4):144-156.

Fan GAO, Jian WANG, Jiqiang LIU. Research on link detection technology based on dynamic browser fingerprint[J]. Chinese Journal of Network and Information Security, 2022, 8(4): 144-156.
高凡, 王健, 刘吉强. 基于动态浏览器指纹的链接检测技术研究[J]. 网络与信息安全学报, 2022,8(4):144-156. DOI： 10.11959/j.issn.2096-109x.2022049.

Fan GAO, Jian WANG, Jiqiang LIU. Research on link detection technology based on dynamic browser fingerprint[J]. Chinese Journal of Network and Information Security, 2022, 8(4): 144-156. DOI： 10.11959/j.issn.2096-109x.2022049.

摘要

随着用户隐私泄露和网络欺诈问题的出现，传统检测机制已经不能阻挡愈演愈烈的攻击行为，需要新的技术手段辅助进行 Web 安全检测。作为沟通用户与网络数据的桥梁，浏览器广泛应用于用户与各种应用程序之间的交互，其中浏览器指纹包含用户浏览器及设备等多种特征信息，其独特性可以极大地提高用户识别的准确率。但是浏览器指纹随时间不断发生变动，基于静态指纹的研究方案难以满足动态指纹检测的要求。针对这一问题，为了提高动态浏览器指纹的识别和链接检测能力，从多维角度获取参数并进行筛选，得到细粒度和高区分度的特征进行指纹检测，防止过多不必要参数带来的运算代价，并将双向门控循环单元（BiGRU，bidirectional gating recurrent unit）引入指纹检测工作中，提出了基于堆叠BiGRU的动态浏览器指纹链接检测模型，解决了指纹检测过程中忽略前后向信息交互导致的检测精度不高的问题，在准确率和链接时长等指标上有了一定的提升。进而针对不同特征参数的重要性不同，赋予相同权重会造成检测误差的问题，结合注意力机制聚焦稳定性更强的指纹特征，提出了基于Att-BiGRU的动态浏览器指纹链接检测模型，较堆叠BiGRU 有了检测能力上的优化，进一步提高了浏览器指纹的检测准确率，并在与基准模型的综合指标对比结果中表现出了良好的链接能力。

Abstract

With the emergence of user privacy leakage and online fraud

traditional detection mechanisms can no longer stop the intensified attacks and new methods are needed to assist in web security detection.As a bridge between users and network data

browsers are widely used in the interaction between users and various applications.The browser fingerprint contains various characteristic information of the user’s browser and device

and its uniqueness can greatly improve the accuracy of user identification.However

browser fingerprints may change over time

and solutions based on static fingerprints cannot meet the requirements of dynamic fingerprints detection.Motivated by this challenge

it’s necessary to improve the recognition and link detection capabilities of dynamic browser fingerprints.Besides

parameters from multi-dimensional perspective need to be obtained and screened to get fine-grained and high-discrimination features for model detecting

preventing the calculation cost caused by too many unnecessary parameters.Bidirectional Gating Recurrent Unit (BiGRU) was introduced into the fingerprint detection

and a stacked BiGRU detection model based on dynamic browser fingerprints was proposed.It solved the problem of low detection accuracy caused by ignoring the interaction of forward and backward information in the process of fingerprints detection

and it also had a certain improvement in indicators such as accuracy and linking time.Furthermore

in view of the different importance of different feature parameters

the same weight given to parameters will result in detection error.Combined with the attention mechanism to focus more stable fingerprint features

an Att-BiGRU fingerprint detection model based on dynamic browser fingerprints was proposed.It optimized the detection ability compared to BiGRU

further improved the detection accuracy of browser fingerprinting

and showed good linking ability on the comprehensive index under the benchmark model.

关键词

Keywords

references

PAPADOPOULOS P , KOURTELLIS N , MARKATOS E P . Cookie Synchronization:everything you always wanted to know but were afraid to ask [C ] // World Wide Web Conference . 2019 : 1432 - 1442 .

XUEHUI H , NISHANTH S . Characterising third PARTY cookie usage in the EU after GDPR [C ] // ACM Conference on Web Science . 2019 : 137 - 141 .

ANDRIAMILANTO N , ALLARD T , GUELVOUIT G L . “Guess who?” large-scale data-centric study of the adequacy of browser fingerprints for web authentication [J ] . Innovative Mobile and Internet Services in Ubiquitous Computing (IMIS) , 2021 , 7 : 161 - 172 .

ECKERSLEY P . How unique is your web browser [C ] // Proceedings of the 2010 Privacy Enhancing Technologies Symposium . 2010 : 1 - 18 .

LAPERDRIX P , NATALIIA B , BENOIT B , et al . Browser fingerprinting:a survey [J ] . ACM Trans , 2020 , 14 ( 2 ): 1 - 33 .

ANDRIAMILANTO N , ALLARD T , GUELVOUIT G L . FPSelect:low-cost browser fingerprints for mitigating dictionary attacks against web authentication mechanisms [C ] // Annual Computer Security Applications Conference (ACSAC '20) . 2020 : 627 - 642 .

TORRES C , HUGO J , SJOUKE M . FP-Block:usable Web privacy by controlling browser fingerprinting [C ] // Proceedings of the 20th European Symposium on Research in Computer Security , 2015 : 3 - 19 .

FIORE U , ANIELLO C , ALFREDO D , et al . Countering browser fingerprinting techniques:constructing a fake profile with Google Chrome [C ] // Proceedings of the 17th International Conference on Network-Based Information Systems . 2014 : 355 - 360 .

LAPERDRIX P , BENOIT B , VIKAS M . FPRandom:randomizing core browser objects to break advanced device fingerprinting techniques [C ] // Proceedings of the 9th International Symposium on Engineering Secure Software and Systems . 2017 : 97 - 114 .

WANG C , DANI J , LI X , et al . Adaptive fingerprinting:website fingerprinting over few encrypted traffic [C ] // Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy (CODASPY '21) . 2021 : 149 - 160 .

Saito . Tor fingerprinting:Tor browser can mitigate browser fingerprinting? [C ] // International Conference on Network-Based Information Systems , 2017 : 504 - 517 .

BURSZTETN E , ARTEM M , TADEK P , et al . Picasso:lightweight device class fingerprinting for Web clients [C ] // Proceedings of the 6th Workshop on Security and Privacy in Smartphones and Mobile Devices . 2016 : 93 - 102 .

FAIZ-RHADEMI A , MOHAMMAD Z , KOMMINIST W . FPGuard:detection and prevention of browser fingerprinting [C ] // Proceedings of the 29th Data and Applications Security and Privacy Conference . 2015 : 293 - 308 .

ROCHET F , KYRIAKOS E , OLIVIER P . SWAT:Seamless Web authentication technology [C ] // Proceedings of the World Wide Web Conference . 2019 : 1579 - 1589 .

LAPERDRIX P , GILDAS A , NICK N . Morellian analysis for browsers:making web authentication stronger with canvas fingerprinting [C ] // Proceedings of the 16th International Conference on Detection of Intrusions and Malware,and Vulnerability Assessment . 2019 : 43 - 66 .

SecurAuth . Device/Browser fingerprinting-heuristic-based authentication [EB ] . 2018 .

Iovation . ClearKey [EB ] . 2018 .

ALACA F , VAN O . Device fingerprinting for augmenting web authentication:Classification and analysis of methods [C ] // Proeedgs of the 32nd Annual Conference on Computer Security Applications . 2016 : 289 - 301 .

VASTEL A , PIERRE L , ROMAIN R . FP-STALKER:tracking browser fingerprint evolutions [C ] // Proceedings of the 39th IEEE Symposium on Security and Privacy . 2018 : 1 - 14 .

LI X , CUI X , WANG X . Constructing browser fingerprint tracking chain based on lstm model [J ] . IEEE . 2018 , 7 : 13 - 18 .

LI S , CAO Y . Who touched my browser fingerprint? a large-scale measurement study and classification of fingerprint dynamics [C ] // Proceedings of the ACM Internet Measurement Conference . 2020 . 370 - 385 .

ANTONIO E , FAJARDO A , MEDINA R . Tracking browser fingerprint using Rule Based Algorithm [C ] // 16th IEEE International Colloquium on Signal Processing ＆ Its Applications (CSPA) . 2020 : 225 - 229 .

浏览量

625

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于流量交互图分析的Web服务威胁检测方法

融合色彩空间特征与频域特征的多源伪造图像检测方法

基于跨流注意力增强中心差分卷积网络的CG图像检测

基于注意力机制与特征融合的网络钓鱼检测算法

基于程序过程间语义优化的深度学习漏洞检测方法