國立虎尾科技大學 |

Measurement, Evaluation, and Defense against Privacy Risks to Web Users.

Record Type:	Language materials, manuscript : Monograph/item
Title/Author:	Measurement, Evaluation, and Defense against Privacy Risks to Web Users./
Author:	Kaizer, Andrew John.
Description:	1 online resource (175 pages)
Notes:	Source: Dissertation Abstracts International, Volume: 79-01(E), Section: B.
Subject:	Computer science. -
Online resource:	click for full text (PQDT)
ISBN:	9780355152227

Measurement, Evaluation, and Defense against Privacy Risks to Web Users.
Kaizer, Andrew John.

Measurement, Evaluation, and Defense against Privacy Risks to Web Users. - 1 online resource (175 pages)

Source: Dissertation Abstracts International, Volume: 79-01(E), Section: B.

Thesis (Ph.D.)--Indiana University, 2017.

Includes bibliographical references

The Internet has become a critical tool for individuals in all aspects of our lives: From entertainment to social networking to managing finance and health information. However, this reliance on the Internet has a dark side for privacy, as users are constantly tracked and profiled with minimal transparency or consent. The approaches to track users and extract their information come primarily in two forms: machine-based personal information (MPI)---e.g. browser version, installed plugins, etc.---and personally identifiable information (PII)---e.g. email, name, credit card details, etc. In this dissertation we measure the privacy risks associated with how first party websites expose and third parties track and profile users online using MPI and PII approaches that have not been previously explored and propose techniques that users can employ to protect their privacy. We break this dissertation into three core contributions. First, we study the differences between how first party websites treat logged-in and not-logged-in users to establish that different advertisers, profilers, and tracking firms are encountered by users. We also explore how PII is leaked and use this information to create a model to identify what PII is most valuable to third parties. Our second contribution establishes that the privacy footprint of a first party website can be calculated without providing any PII. We observe that the same PII is accessible when logged-in and not-logged-in; detail how website category, popularity, and PII co-occurrence impact what PII is requested; and compare models to create a "privacy score" that succinctly informs users when a website requests more PII than expected. Our third contribution is the development of a machine learning classifier capable of identifying third party JavaScript-based MPI tracking with 97.7% accuracy. This expands upon prior work that primarily focused on identifying specific JavaScript-based vectors: cookies, font-based, and graphic-based.

Electronic reproduction.
Ann Arbor, Mich. :
ProQuest,
2018

Mode of access: World Wide Web

ISBN: 9780355152227Subjects--Topical Terms:

573171
Computer science.
Index Terms--Genre/Form:

554714
Electronic books.

Measurement, Evaluation, and Defense against Privacy Risks to Web Users.
LDR:03172ntm a2200337K 4500 001 915165
005 20180727091511.5
006 m o u
007 cr mn||||a|a||
008 190606s2017 xx obm 000 0 eng d
020 $a 9780355152227
035 $a (MiAaPQ)AAI10600828
035 $a (MiAaPQ)indiana:14769
035 $a AAI10600828
040 $a MiAaPQ $b eng $c MiAaPQ
100 1 $a Kaizer, Andrew John. $3 1188436
245 1 0 $a Measurement, Evaluation, and Defense against Privacy Risks to Web Users.
264 0 $c 2017
300 $a 1 online resource (175 pages)
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
500 $a Source: Dissertation Abstracts International, Volume: 79-01(E), Section: B.
500 $a Adviser: Minaxi Gupta.
502 $a Thesis (Ph.D.)--Indiana University, 2017.
504 $a Includes bibliographical references
520 $a The Internet has become a critical tool for individuals in all aspects of our lives: From entertainment to social networking to managing finance and health information. However, this reliance on the Internet has a dark side for privacy, as users are constantly tracked and profiled with minimal transparency or consent. The approaches to track users and extract their information come primarily in two forms: machine-based personal information (MPI)---e.g. browser version, installed plugins, etc.---and personally identifiable information (PII)---e.g. email, name, credit card details, etc. In this dissertation we measure the privacy risks associated with how first party websites expose and third parties track and profile users online using MPI and PII approaches that have not been previously explored and propose techniques that users can employ to protect their privacy. We break this dissertation into three core contributions. First, we study the differences between how first party websites treat logged-in and not-logged-in users to establish that different advertisers, profilers, and tracking firms are encountered by users. We also explore how PII is leaked and use this information to create a model to identify what PII is most valuable to third parties. Our second contribution establishes that the privacy footprint of a first party website can be calculated without providing any PII. We observe that the same PII is accessible when logged-in and not-logged-in; detail how website category, popularity, and PII co-occurrence impact what PII is requested; and compare models to create a "privacy score" that succinctly informs users when a website requests more PII than expected. Our third contribution is the development of a machine learning classifier capable of identifying third party JavaScript-based MPI tracking with 97.7% accuracy. This expands upon prior work that primarily focused on identifying specific JavaScript-based vectors: cookies, font-based, and graphic-based.
533 $a Electronic reproduction. $b Ann Arbor, Mich. : $c ProQuest, $d 2018
538 $a Mode of access: World Wide Web
650 4 $a Computer science. $3 573171
650 4 $a Information science. $3 561178
650 4 $a Web studies. $3 1148502
655 7 $a Electronic books. $2 local $3 554714
690 $a 0984
690 $a 0723
690 $a 0646
710 2 $a ProQuest Information and Learning Co. $3 1178819
710 2 $a Indiana University. $b Computer Sciences. $3 1179305
856 4 0 $u http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=10600828 $z click for full text (PQDT)