XRay: Enhancing the Web's Transparency with Differential Correlation
arXiv (Cornell University)Published 8 July 2014Open access
Mathias Lécuyer, Guillaume Ducoffe, Francis Lan, Andrei Papancea, Theofilos Petsios, Riley Spahn
Citations32
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
Abstract
Today's Web services - such as Google, Amazon, and Facebook - leverage user\ndata for varied purposes, including personalizing recommendations, targeting\nadvertisements, and adjusting prices. At present, users have little insight\ninto how their data is being used. Hence, they cannot make informed choices\nabout the services they choose. To increase transparency, we developed XRay,\nthe first fine-grained, robust, and scalable personal data tracking system for\nthe Web. XRay predicts which data in an arbitrary Web account (such as emails,\nsearches, or viewed products) is being used to target which outputs (such as\nads, recommended products, or prices). XRay's core functions are service\nagnostic and easy to instantiate for new services, and they can track data\nwithin and across services. To make predictions independent of the audited\nservice, XRay relies on the following insight: by comparing outputs from\ndifferent accounts with similar, but not identical, subsets of data, one can\npinpoint targeting through correlation. We show both theoretically, and through\nexperiments on Gmail, Amazon, and YouTube, that XRay achieves high precision\nand recall by correlating data from a surprisingly small number of extra\naccounts.\n
Keywords
Computer Science
Fully homomorphic encryption using ideal lattices
6,381 Citations2009Craig Gentry
This work proposes a fully homomorphic encryption scheme that allows one to evaluate circuits over encrypted data without being able to decrypt, and describes a public key encryption scheme using ideal lattices that is almost bootstrappable.
Attribute-based encryption for fine-grained access control of encrypted data
4,941 Citations2006Vipul Goyal, Omkant Pandey +2 more
This work develops a new cryptosystem for fine-grained sharing of encrypted data that is compatible with Hierarchical Identity-Based Encryption (HIBE), and demonstrates the applicability of the construction to sharing of audit-log information and broadcast encryption.
Tor: The Second-Generation Onion Router
4,031 Citations2004Roger Dingledine, Nick Mathewson +1 more
This second-generation Onion Routing system addresses limitations in the original design by adding perfect forward secrecy, congestion control, directory servers, integrity checking, configurable exit policies, and a practical design for location-hidden services via rendezvous points.
Lecture notes in computer sciencePublic Key Encryption with Keyword Search
3,103 Citations2004Dan Boneh, Giovanni Di Crescenzo +2 more
This work defines and construct a mechanism that enables Alice to provide a key to the gateway that enables the gateway to test whether the word “urgent” is a keyword in the email without learning anything else about the email.
Operating Systems Design and ImplementationTaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones
2,280 Citations2010William Enck, Peter Gilbert +5 more
Why Johnny can't encrypt: a usability evaluation of PGP 5.0
1,094 Citations1999Alma Whitten, J. D. Tygar
It is concluded that PGP 5.0 is not usable enough to provide effective security for most computer users, despite its attractive graphical user interface, supporting the hypothesis that user interface design for effective security remains an open problem.
International Journal of Emergency ManagementTwitter adoption and use in mass convergence and emergency events
992 Citations2009Amanda Hughes, Leysia Palen
The findings suggest that Twitter messages sent during these types of events contain more displays of information broadcasting and brokerage, and that general Twitter use seems to have evolved over time to offer more of an information-sharing purpose.
The official PGP user's guide
896 Citations1996Philip Zimmermann
This tutorial discusses how public key cryptography works installing PGP using PGP managing keys advanced topics beware of snake oil and a peek under the hood vulnerabilities.
Communications of the ACMDiscrimination in online ad delivery
751 Citations2013Latanya Sweeney
Google ads, black names and white names, racial discrimination, and click advertising.
IEEE SoftwareBlack Box Testing: Techniques for Functional Testing of Software and Systems
449 Citations1996Boris Beizer, J. C. Wiley
This paper presents a meta-analyses ofFlow, a natural language processing system that automates the very labor-intensive and therefore time-heavy and expensive process of designing and testingFlow-based models for smoothness and efficiency.
Measuring personalization of web search
388 Citations2013Anikó Hannák, Piotr Sapieżyński +5 more
A methodology for measuring personalization in Web search results is developed and it is found that, on average, 11.7% of results show differences due to personalization, but that this varies widely by search query and by result ranking.
On the leakage of personally identifiable information via online social networks
372 Citations2009Balachander Krishnamurthy, Craig E. Wills
This research shows that it is possible for third-parties to link PII, which is leaked via OSNs, with user actions both within OSN sites and else-where on non-OSN sites.
Detecting and defending against third-party tracking on the web
342 Citations2012Franziska Roesner, Tadayoshi Kohno +1 more
This work develops a client-side method for detecting and classifying five kinds of third-party trackers based on how they manipulate browser state, and finds that no existing browser mechanisms prevent tracking by social media sites via widgets while still allowing those widgets to achieve their utility goals, which leads to a new defense.
Vanish: increasing data privacy with self-destructing data
341 Citations2009Roxana Geambasu, Tadayoshi Kohno +2 more
Vanish is presented, a system that meets this challenge through a novel integration of cryptographic techniques with global-scale, P2P, distributed hash tables (DHTs) and meets the privacy-preserving goals described above.
Lecture notes in computer scienceAutomatic Crime Prediction Using Events Extracted from Twitter Posts
339 Citations2012Xiaofeng Wang, Matthew S. Gerber +1 more
This approach is based on the automatic semantic analysis and understanding of natural language Twitter posts, combined with dimensionality reduction via latent Dirichlet allocation and prediction via linear modeling, and tested on the task of predicting future hit-and-run crimes.
Who Owns the Future
266 Citations2013Jaron Lanier
In the most ambitious part of the book, Lanier expresses what he believes to be the ideal version of the networked future--one that is built on two-way connections instead of one-way relationships, allowing content, media, and other innovations to be more easily attributed.
Detecting price and search discrimination on the internet
236 Citations2012Jakub Mikians, László Gyarmati +2 more
This paper empirically demonstrate the existence of signs of both price and search discrimination on the Internet, and to uncover the information vectors used to facilitate them, and outlines the design of a large-scale, distributed watchdog system that allows users to detect discriminatory practices.
Columbia Academic Commons (Columbia University)Algorithmic Accountability Reporting: On the Investigation of Black Boxes
223 Citations2014Nicholas Diakopoulos
I'm indebted to a number of people who were generous with their time in providing feedback and helping me to think through and shape the ideas presented here.
Challenges in measuring online advertising systems
167 Citations2010Saikat Guha, Bin Cheng +1 more
A first principled look at measurement methodologies for ad networks is taken, which proposes new metrics that are robust to the high levels of noise inherent in ad distribution, identifies measurement pitfalls and artifacts, and provides mitigation strategies.
TaintTrace: Efficient Flow Tracing with Dynamic Binary Rewriting
146 Citations2006Weihua Cheng, Qin Zhao +2 more
This paper demonstrates that TaintTrace is effective in protecting against various attacks while maintaining a modest slowdown of 5.5 times, offering significant improvements over similar tools.
Privacy Violations Using Microtargeted Ads: A Case Study
120 Citations2010Aleksandra Korolova
A new class of attacks that exploit advertising systems offering micro targeting capabilities in order to breach user privacy are proposed and experimental evidence of several novel approaches to exploiting the advertising system inorder to obtain private user information is provided.
Measuring and fingerprinting click-spam in ad networks
116 Citations2012Vacha Dave, Saikat Guha +1 more
This paper proposes the first methodology for advertisers to independently measure click-spam rates on their ads and develops an automated methodology for ad networks to proactively detect different simultaneous click- Spam attacks.
Selling off Privacy at Auction
107 Citations2014Łukasz Olejnik, Tran Minh-Dung +1 more
A privacy analysis of CM and RTB is performed and it is shown that users with known Web browsing history are evaluated higher than new comers, that some user profiles are more valuable than others, and that users' intents are sold at higher prices than users' Web browsing histories.
RePriv: Re-imagining Content Personalization and In-browser Privacy
80 Citations2011Matt Fredrikson, Benjamin Livshits
It is shown that RePrivenables high-quality personalization yields higher quality results than those that maybe obtained about the user from public sources, and that the performance impact each case has on the browser is minimal.
Understanding what they do with what they know
79 Citations2012Craig E. Wills, Can Tatar
This work analyzes the ads shown to users during controlled browsing as well as examine the inferred demographics and interests shown in Ad Preference Managers provided by advertisers to understand what "they" (Web advertisers) actually do with the information available to them.
Adscape
73 Citations2014Paul Barford, Igor Canadi +3 more
A first-of-its-kind study that seeks to broadly understand the features, mechanisms and dynamics of display advertising on the web - i.e., the Adscape - from the perspective of users who are the targets of display ads shown on web sites.
arXiv (Cornell University)XRay: Enhancing the Web's Transparency with Differential Correlation
71 Citations2014Mathias Lécuyer, Guillaume Ducoffe +6 more
XRay is developed, the first fine-grained, robust, and scalable personal data tracking system for the Web, which achieves high precision and recall by correlating data from a surprisingly small number of extra accounts.
AdReveal
69 Citations2013Bin Liu, Anmol Sheth +3 more
AdReveal, a practical measurement and analysis framework, provides a first look at the prevalence of different ad targeting mechanisms and designs and implements a browser based tool that provides detailed measurements of online display ads, and develops analysis techniques to characterize the contextual, behavioral and re-marketing based targeting mechanisms used by advertisers.
Lecture notes in computer scienceBetrayed by Your Ads!
52 Citations2012Claude Castelluccia, Mohamed Ali Kâafar +1 more
Modeling the impact of lifestyle on health at scale
52 Citations2013Adam Sadilek, Henry Kautz
A unified statistical model is used to quantify the impact of social status, exposure to pollution, interpersonal interactions, and other important lifestyle factors on one's health and predicts the future health status of individuals with 91% accuracy.
Lecture notes in computer scienceExposing Inconsistent Web Search Results with Bobble
36 Citations2014Xinyu Xing, Wei Meng +4 more
Bobble is presented, a Web browser extension that contemporaneously executes a user's Google search query from a variety of different world-wide vantage points under a range of different conditions, alerting the user to the extent of inconsistency present in the set of search results returned to them by Google.
Privacy Scope: A Precise Information Flow Tracking System For Finding Application Leaks
30 Citations2009Yu Zhu, Jaeyeon Jung +3 more
Privacy Scope uses application-level dynamic taint analysis, implemented with dynamic binary translation tools, to let users run applications in their own environment while pinpointing information leaks, even when the sensitive data is encrypted.