An Anti-interference Browser Fingerprinting Generation Algorithm Based on Implicitly Acquiring Features

doi:10.3969/j.issn.1671-1122.2017.04.010

Abstract

Abstract:

The browser fingerprinting technique builds a unique browser fingerprinting through the combination of user User-Agent, browser version, plug-ins list, OS and other features. This technique is commonly employed to user tracking, authentication and other aspects. However, with the deepening of the research, the method of interfering with the browser fingerprinting generation has been proposed. The fingerprinting interference tool can affect the generation of the fingerprinting by forging the information and limiting the functions. To solve these problems, this paper proposes an anti-interference browser fingerprinting generation algorithm based on implicitly acquiring features. Firstly, the features are collected to construct the database of fingerprinting features. Then, the obtained features are encrypted by SHA 1 algorithm. Finally, the encrypted features are encoded by base 64 method to generate the fingerprinting. Even in the case of using interference tools, the generated fingerprinting result will not be affected. Experimental result shows that the algorithm is effective and accurate.

Key words: features implicit acquisition, browser fingerprinting, anti-interference, fingerprinting generation

CLC Number:

TP391

Nianhua KANG, Mingzhi CHEN, Yingyan FENG, Chuanbao LIU. An Anti-interference Browser Fingerprinting Generation Algorithm Based on Implicitly Acquiring Features[J]. Netinfo Security, 2017, 17(4): 71-77.

Figures/Tables 10

References 18

[1]	NIKIFORAKIS N,KAPRAVELOS A,JOOSEN W, et al.Cookieless Monster: Exploring the Ecosystem of Web-based Device Fingerprinting[C]// IEEE.IEEE Symposium on Security and Privacy, May 19 - 22, 2013 . Washington, DC, USA .NJ:IEEE,2013:541-555.
[2]	文伟平,郭荣华,孟正,等. 信息安全风险评估关键技术研究与实现[J].信息网络安全,2015(2):7-14.
[3]	ACAR G,EUBANK C,ENGLEHARDT S,et al.The Web Never Forgets: Persistent Tracking Mechanisms in the Wild[C]//ACM.Proceedings of the 21st ACM conference on Computer and Communications Security, November 3 - 7, 2014 . Scottsdale, Arizona, USA .New York:ACM,2014:674-689.
[4]	UNGER T,MULAZZANI M,FRUHWIRT D,et al.SHPF: Enhancing HTTP(S) Session Security with Browser Fingerprinting[C]//IEEE.International Conference on Availability, Reliability and Security, September 2 - 6, 2013. Washington, DC, USA.NJ: IEEE,2013:255-261.
[5]	夏荣. Web取证分析技术研究与应用[J].信息网络安全,2015(9):201-205.
[6]	UPATHILAKE R,LI Yingkun, MATRAWY A .A Classification of Web Browser Fingerprinting Techniques[EB/OL]. ,2017-2-1.
[7]	ECKERSLEY P.How Unique Is Your Browser[EB/OL]. ,2017-2-1.
[8]	MOWERY K,SHACHAM H.Pixel Perfect: Fingerprinting Canvas in HTML5[EB/OL]. .
[9]	MULAZZANI M,RESCHL P,HUBER M.Fast and Reliable Browser Identification with JavaScript Engine Fingerprinting[EB/OL]. ,2017-2-1.
[10]	BODA K,FOLDES A M,GULYAS G G,et al.User Tracking on the Web via Cross-browser Fingerprinting[M]//Information Security Technology for Applications. Heidelberg:Springer, Berlin, Heidelberg, 2012:31-46.
[11]	王维,王伟平,王建新.一种基于升级浏览器指纹的用户识别方法[EB/OL]. , 2017-2-1.
[12]	FIFIELD D,EGELMAN S.Fingerprinting Web Users Through Font Metrics[M]//Financial Cryptography and Data Security. Heidelberg: Springer, Berlin, Heidelberg, 2015:107-124.
[13]	季玉香,朱延,唐晓强. 基于Web的软件安全分析与监测[J].信息网络安全,2016(9):208-212.
[14]	Boda K.FireGloves[EB/OL].,2017-2-1.
[15]	Appodrome.Canvasfingerprintblock[EB/OL]. ,2017-2-1.
[16]	Ghostwords.Chameleon[EB/OL].,2017-2-1.
[17]	TAKEI N,SAITO T,TAKASU K,et al. Web Browser Fingerprinting using only Cascading Style Sheets[EB/OL]. ,2017-2-1.
[18]	Faizkhademi A,ZULKERNINE M,WELDEMARIAM K.FPGuard: Detection and Prevention of Browser Fingerprinting[M]//Data and Applications Security and Privacy XXIX, Switzerland:Springer, Cham, 2015:293-308.