BEFP: An Extension Recognition System Based on Behavioral and Environmental Fingerprinting

Browser extensions are third-party applications that can customize the browsing experience. Previous studies have shown that browser extension fingerprinting can be used to track users and reveal users’ privacy information by obtaining the browser extension list. However, the proposal of various def...

Full description

Saved in:
Bibliographic Details
Published in:Security and communication networks 2022-02, Vol.2022, p.1-15
Main Authors: Lyu, Ting, Liu, Liang, Zhu, Fangzhou, Hu, Simin, Ye, Renjun
Format: Article
Language:English
Subjects:
Behavior
Defense
Design
Fingerprinting
Internet
JavaScript
Performance evaluation
Privacy
Recognition
Citations: Items that this one cites
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Browser extensions are third-party applications that can customize the browsing experience. Previous studies have shown that browser extension fingerprinting can be used to track users and reveal users’ privacy information by obtaining the browser extension list. However, the proposal of various defense measures weakens the effectiveness of the existing extension fingerprinting technologies. In this paper, we first propose two extension fingerprinting technologies: JavaScript-based environmental fingerprinting and DOM-based behavioral fingerprinting. They, respectively, capture the operation behaviors of extensions on JavaScript properties and webpage’s DOM. Second, we design BEFP, an extension recognition system which comprehensively utilizes the above two technologies to improve the uniqueness of the extension fingerprint. Finally, we collect the latest data set and carry out experiments on the actual scenario where users install multiple extensions. The results show that the true positive rate of extension recognition is as high as 96.3%. And the extension’s detectable rate of BEFP is superior to the existing technologies. Moreover, it is proved that the JavaScript-based environmental fingerprinting can complement the DOM-based fingerprinting to distinguish the extensions with the same DOM modification.
ISSN:1939-0114
1939-0122
DOI:10.1155/2022/7896571