arrow
Return

A Two-Step TLS-Based Browser fingerprinting approach using combinatorial sequences

delete2022-03-01
delete1
delete
OA
AI
B
Bernhard Garn
S
Stefan Zauner
D
Dimitris E. Simos *
M
Manuel Leithner
R
Richard Kühn
R
Raghu N. Kacker
DOI:10.1016/j.cose.2021.102575delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
We propose a two-step TLS-based fingerprinting approach using combinatorial sequences and properties of TLS handshake messages. Our approach combines fingerprinting based on attributes of the initial ClientHello message with the observed behavior of TLS clients when presented with permuted handshake messages in order to enhance the granularity of the derived fingerprints without increasing the required number of exchanged messages. We conduct a detailed evaluation against 21 browsers and TLS clients on two operating systems. The results show a significant increase in the entropy of the achieved splittings, allowing for a more precise identification of the TLS client than permitted by either of the underlying approaches in isolation. (C) 2021 Elsevier Ltd. All rights reserved.
Keywords:
Browser fingerprinting
TLS Protocol
Combinatorial sequences
Anonymity set
Fraud detection
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

C
Computers and Security
IF:
5.4
Papers:
4.6K
Citations:
1.4W

Organization

N
national institute of standards & technology (nist) - usa
Scholars:
9.7K
Papers: 9.0K
Citations: 4