计算机科学 ›› 2024, Vol. 51 ›› Issue (6): 409-415.doi: 10.11896/jsjkx.230400003
楚小茜1, 张建辉2, 张德升1, 苏珲1
CHU Xiaoxi1, ZHANG Jianhui2, ZHANG Desheng1, SU Hui1
摘要： 当前Web追踪领域主要使用浏览器指纹对用户进行追踪。针对浏览器指纹追踪技术存在指纹随时间动态变化、不易长期追踪等问题,提出一种关注节点和边缘特征的改进图采样聚合算法(An Improved Graph SAmple and AGgregatE with Both Node and Edge Features,NE-GraphSAGE)用于浏览器指纹追踪。首先以浏览器指纹为节点、指纹之间特征相似度为边构建图数据。其次对图神经网络中的GraphSAGE算法进行改进使其不仅能关注节点特征,而且能捕获边缘信息并对边缘分类,从而识别指纹。最后将NE-GraphSAGE算法与Eckersley算法、FPStalker算法和LSTM算法进行对比,验证NE-GraphSAGE算法的识别效果。实验结果表明,NE-GraphSAGE算法在准确率和追踪时长上均有不同程度的提升,最大追踪时长可达80天,相比其他3种算法性能更优,验证了NE-GraphSAGE算法对浏览器指纹长期追踪的能力。
中图分类号:
| [1]Cookie Policy-Intellias[EB/OL].[2021-12-28].https://intellias.com/cookie-policy/. [2]Cookies:An overview of associated privacy and security risks-Infosec Resources[EB/OL].[2021-12-28].https://resources.infosecinstitute.com/topic/cookies an-overview-of-associated-privacy-and-security risks/. [3]PIERRE L,NATALIIA B,BENOIT B,et al.Browser finger-printing:a survey[J].ACM Trans,2020,14(2):1-33. [4]WANG X Q,LIU Q X,LIU C G,et al.Overview of Web Tra-cking Technology[J].Computer Research and Development,2023,60(4):839-859. [5]LI S,CAO Y Z.Who touched my browser fingerprint? A large-scale measurement study and classification of fingerprint dyna-mics[C]//Proceedings of the 20th ACM Internet Measurement Conference.New York:ACM,2020:370-385. [6]WU Z,PAN S,CHEN F,et al.A Comprehensive Survey onGraph Neural Networks[C]//IEEE Transactions on Neural Networks and Learning Systems.2021:4-24. [7]HAMILTON W L,YING Z,LESKOVEC J.Inductive representation learning on large graphs[J].arXiv:1706.02216,2017. [8]ECKERSLEY P.How unique is your web browser?[C]//Proceedings of the 2010 Privacy Enhancing Technologies Sympo-sium.2010:1-18. [9]ZHANG L F,WANG Y,WU Y Y,et al.Browser fingerprintcollection technology based on statistics[J].Information Network Security,2019(11):49-55. [10]ZHANG Y Q,WANG W P,WANG W.A fingerprint recognition method for gradient browsers[J].Computer Engineering and Applications,2018,54(7):102-106. [11]JIANG W,WANG X X,SONG X F,et al.Tracking your browser with high-performance browser fingerprint recognition mo-del[J].China Communications,2020,17(3):168-175. [12]ANTONIO E,FAJARDO A,MEDINA R.Tracking BrowserFingerprint using Rule Based Algorithm[C]//16th IEEE International Colloquium on Signal Processing & Its Applications(CSPA).2020:225-229. [13]ANDRIAMILANTO N,ALLARD T,GUELVOUIT G L.FPSelect:low-cost browser fingerprints for mitigating dictionary attacks against web authentication mechanisms[C]//Annual Computer Security Applications Conference(ACSAC’20).2020:627-642. [14]ZOU F,ZHAI H.Browser Fingerprinting Identification Using Incremental Clustering Algorithm Based on Autoencoder[C]//2021 IEEE 23rd Int Conf on High Performance Computing & Communications.2021:525-532. [15]ANTOINE V,PIERRE L,ROMAIN R.FP-STALKER:Tra-cking browser fingerprint evolutions[C]//Proceedings of the 39th IEEE Symposium on Security and Privacy.2018:1-14. [16]LI X,CUI X,SHI L,et al.Constructing Browser Fingerprint Tracking Chain Based on LSTM Model[C]//Third IEEE International Conference on Data Science in Cyberspace(DSC 2018).Guangzhou,China,IEEE,2018:213-218. [17]LIU Q X,LIU X Y,LUO C,et al.Android Browser Fingerprin-ting Method Based on Bidirectional Recurrent Neural Network[J].Journal of Computer Research and Development,2020,57:2294. [18]GAO F,WANG J,LIU J Q.Research on link detection techno-logy based on dynamic browser fingerprints[J].Journal of Network and Information Security,2022,8(4):144-156. [19]RIVERA E,TENGANA L,SOLANO J,et al.Scalable and Secure HTML5 Canvas-Based User Authentication[C]//Applied Cryptography and Network Security Workshops.2022:554-574. [20]CAO Y,LI S,WIJMANS E.(Cross-)Browser Fingerprinting via OS and Hardware Level Features[C]//24th Annual Network and Distributed System Security Symposium(NDSS 2017).San Diego,California,USA.The Internet Society,2017. [21]MA S,LIU J W,ZUO X.Survey on graph neural network[J].Journal of Computer Research and Development,2022,59(1):47-80. [22]WAI W L,SIAMAK L,MOHANAD S,et al.E-graphsage:Agraph neural network based intrusion detection systemJ].ar-Xiv:2103.16329,2021. |
|
||
首页