Study on Fundation of Web Browser Fingerprinting

• Project/Area Number: 26330162
• Research Category: Grant-in-Aid for Scientific Research (C)
• Allocation Type: Multi-year Fund
• Section: 一般
• Research Field: Information security
• Research Institution: Meiji University
• Principal Investigator: Saito Takamichi 明治大学, 理工学部, 教授 (90307702)
• Project Period (FY): 2014-04-01 – 2017-03-31
• Project Status: Completed (Fiscal Year 2016)
• Budget Amount: ¥4,160,000 (Direct Cost: ¥3,200,000、Indirect Cost: ¥960,000); Fiscal Year 2016: ¥1,300,000 (Direct Cost: ¥1,000,000、Indirect Cost: ¥300,000); Fiscal Year 2015: ¥1,430,000 (Direct Cost: ¥1,100,000、Indirect Cost: ¥330,000); Fiscal Year 2014: ¥1,430,000 (Direct Cost: ¥1,100,000、Indirect Cost: ¥330,000)
• Keywords: Web / プライバシー / トラッキング / Browser fingerprint / Web Browser Fingerprint / Web追跡 / Web browser fingerprint

Outline of Final Research Achievements

Recently, JavaScript with HTML5 is becoming more popular in Web application design. As a side effect, this technology can also be used to collect Web client information such as Web browser families, OS, GPU, font lists or screen size. Web servers can now collect these kinds of information without Web viewer consent or malicious exploits. This kind of collection from Web servers is called Web browser fingerprinting, and is used for identifying or tracking Web viewers in commercial sites. We revealed how Web browser fingerprinting works.

Research Products

• [Journal Article] A Browser Scanner: Collecting Intranet Information， (2016)
  • Author(s): Rio Hosoi, Takamichi Saito, Takayuki Ishikawa, Daichi Miyata, and Yongyan Chen，
  • Journal Title: 19th International Conference on Network-Based Information Systems (NBiS 2016) Volume: - Pages: 140-145
  • DOI: 10.1109/nbis.2016.10
  • NAID: 170000151392
  • Peer Reviewed / Open Access / Int'l Joint Research / Acknowledgement Compliant
• [Journal Article] A Survey of Prevention/Mitigation against Memory Corruption Attacks， (2016)
  • Author(s): Takamichi Saito, Ryohei Watanabe, Shuta Kondo, Shota Sugawara, Masahiro Yokoyama
  • Journal Title: 19th International Conference on Network-Based Information Systems (NBiS) Volume: - Pages: 500-505
  • DOI: 10.1109/nbis.2016.11
  • NAID: 170000087343
  • Peer Reviewed / Open Access / Acknowledgement Compliant
• [Journal Article] An Authorization Scheme Concealing Client's Access from Authentication Server (2016)
  • Author(s): Takamichi Saito, Yuta Tsunoda, Daichi Miyata, Ryohei Watanabe, Yongyan Chen,
  • Journal Title: 2016 10th International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing (IMIS) Volume: - Pages: 593-598
  • DOI: 10.1109/imis.2016.110
  • Peer Reviewed / Open Access / Int'l Joint Research / Acknowledgement Compliant
• [Journal Article] Estimating CPU Features by Browser Fingerprinting, (2016)
  • Author(s): Takamichi Saito, Koki Yasuda, Takayuki Ishikawa, Rio Hosoi, Kazushi Takahashi, Yongyan Chen, Marcin Zalasiski,
  • Journal Title: 10th International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing (IMIS) Volume: - Pages: 587-592
  • DOI: 10.1109/imis.2016.108
  • Peer Reviewed / Open Access / Int'l Joint Research / Acknowledgement Compliant
• [Journal Article] OS and Application Identification by Installed Fonts (2016)
  • Author(s): Takamichi Saito, Takayuki Ishikawa, Ko Takasu, Tomotaka Yamada, Naoki Takei, Rio Hosoi, Kazushi Takahashi,Koki Yasuda
  • Journal Title: IEEE 30th International Conference on Advanced Information Networking and Applications (AINA) Volume: - Pages: 684-689
  • DOI: 10.1109/aina.2016.55
  • Peer Reviewed / Open Access / Acknowledgement Compliant
• [Journal Article] OS and Application Identification by Installed Fonts (2016)
  • Author(s): Takamichi Saito, Takayuki Ishikawa, Ko Takasu, Tomotaka Yamada, Naoki Takei, Rio Hosoi, Kazushi Takahashi,Koki Yasuda
  • Journal Title: Proc. of the 30th IEEE International Conference on Advanced Information Networking and Applications (AINA) 2016, Volume: 無し
  • Peer Reviewed
• [Journal Article] 認証サーバからユーザが利用するWebサービスを秘匿する権限委譲方式の提案 (2016)
  • Author(s): 角田裕太，渡邉貴文，西倉裕太，宮田大地，渡辺亮平，齋藤孝道
  • Journal Title: 第78回情報処理学会全国大会公演論文集 Volume: 無し
  • NAID: 170000163244
• [Journal Article] JavaScriptキーロガーの検知手法の提案と実装 (2016)
  • Author(s): 平俊介，高須航，山田智隆，武居直樹，西倉祐太，石川貴之，細井理央，安田昂樹，高橋和司，齋藤孝道
  • Journal Title: 第78回情報処理学会全国大会公演論文集 Volume: 無し
  • NAID: 170000163281
• [Journal Article] 脆弱なライブラリ関数を置き換えるプログラムローダによりStack-based Buffer Overflow攻撃を緩和する手法の提案と実装 (2016)
  • Author(s): 近藤秀太，角田佳史，堀洋輔，馬場隆彰，宮崎博行，王氷，渡辺亮平，齋藤孝道
  • Journal Title: 第78回情報処理学会全国大会公演論文集 Volume: 無し
  • NAID: 170000163275
• [Journal Article] Shadow Memoryを用いたプログラムローダによりHeap-based Buffer Overflow攻撃を緩和する手法の提案と実装 (2016)
  • Author(s): 渡辺亮平，角田佳史，堀洋輔，馬場隆彰，宮崎博行，王氷，近藤秀太，齋藤孝道
  • Journal Title: 第78回情報処理学会全国大会公演論文集 Volume: 無し
  • NAID: 170000163274
• [Journal Article] Linuxディストリビューションにおけるメモリ破壊攻撃への対策技術の適用状況の調査 (2016)
  • Author(s): 王氷，角田佳史，堀洋輔，馬場隆彰，宮崎博行，近藤秀太，渡辺亮平，齋藤孝道
  • Journal Title: 第78回情報処理学会全国大会公演論文集 Volume: 無し
  • NAID: 170000163273
• [Journal Article] Browser Fingerprintingにおけるスマートフォンの識別に関する考察 (2016)
  • Author(s): 高橋和司，高須航，山田智隆，武居直樹，西倉裕太，石川貴之，細井理央，安田昂樹，平 俊介，齋藤孝道
  • Journal Title: 第78回情報処理学会全国大会公演論文集 Volume: 無し
  • NAID: 170000163272
• [Journal Article] プログラムローダを用いたメモリ破壊攻撃群への対策技術の提案と実装 (2016)
  • Author(s): 齋藤孝道，角田佳史，堀洋輔，馬場隆彰，宮崎博行，王氷，渡辺亮平，近藤秀太
  • Journal Title: 2016暗号と情報セキュリティシンポジウム Volume: 無し
• [Journal Article] Fingerprintingを用いたTor Browser利用者追跡の実現性について (2016)
  • Author(s): 齋藤孝道，西倉裕太，高須航，武居直樹，山田智隆，石川貴之，細井理央，安田昂樹，高橋和司
  • Journal Title: 2016暗号と情報セキュリティシンポジウム Volume: 無し
• [Journal Article] Web Browser Fingerprinting 技術を用いたCPU拡張機能の推定法の提案と実装 (2016)
  • Author(s): 安田昂樹，高須航，山田智隆，武居直樹，西倉裕太，石川貴之，細井理央，高橋和司，齋藤孝道
  • Journal Title: 2016暗号と情報セキュリティシンポジウム Volume: 無し
• [Journal Article] 認証サーバからユーザが利用するWebサービスを秘匿する権限委譲方式の提案と実装 (2016)
  • Author(s): 渡邉貴文，宮田大地，西倉裕太，角田裕太，渡辺亮平，齋藤孝道
  • Journal Title: 2016暗号と情報セキュリティシンポジウム Volume: 無し
• [Journal Article] Web Browser Fingerprinting Using Only Cascading Style Sheets (2015)
  • Author(s): Naoki Takei, Takamichi Saito, Ko Takasu, Tomotaka Yamada
  • Journal Title: 10TH INTERNATIONAL CONFERENCE ON BROADBAND AND WIRELESS COMPUTING, COMMUNICATION AND APPLICATIONS (BWCCA) 2015 Volume: 無し
  • Peer Reviewed
• [Journal Article] Robust Identification of Browser Fingerprint Comparison Using Edit Distance (2015)
  • Author(s): Tomotaka Yamada, Takamichi Saito, Ko Takasu, Naoki Takei
  • Journal Title: 10TH INTERNATIONAL CONFERENCE ON BROADBAND AND WIRELESS COMPUTING, COMMUNICATION AND APPLICATIONS (BWCCA) 2015 Volume: 無し
  • Peer Reviewed
• [Journal Article] ブラウザが属するネットワークの情報を採取するBrowser Scanner の提案 (2015)
  • Author(s): 細井理央，高須航，山田智隆，武居直樹，石川貴之，高橋和司，安田昂樹，齋藤孝道
  • Journal Title: コンピュータセキュリティシンポジウム2015 論文集 Volume: 無し
  • NAID: 170000151392
• [Journal Article] Fuzzy Hashing を用いた比較による長期的なBrowser Fingerprinting の端末識別手法の提案 (2015)
  • Author(s): 石川貴之，高須航，山田智隆，武居直樹，細井理央，安田昂樹，高橋和司，齋藤孝道
  • Journal Title: コンピュータセキュリティシンポジウム2015 論文集 Volume: 無し
  • NAID: 170000151391
• [Journal Article] Web Browser Fingerprint技術の現状と課題 (2015)
  • Author(s): 齋藤孝道，高須航，山田智隆，武居直樹，石川貴之，細井理央，安田昂樹，高橋和司
  • Journal Title: コンピュータセキュリティシンポジウム2015 論文集 Volume: 無し
  • NAID: 170000151390
• [Journal Article] プログラムローダによりUAF 攻撃を抑制する手法の提案と実装 (2015)
  • Author(s): 齋藤孝道，堀洋輔，角田佳史，馬場隆彰，宮崎博行，王氷，近藤秀太，渡辺 亮平
  • Journal Title: コンピュータセキュリティシンポジウム2015 論文集 Volume: 無し
  • NAID: 170000151367
• [Journal Article] 暗号モジュールを搭載したプロセッサにおける暗号処理のオフローディング方式の効率化の提案と評価 (2015)
  • Author(s): 金子洋平，齋藤孝道，菊池浩明
  • Journal Title: 情報処理学会論文誌 Volume: 56(9) Pages: 1846-1856
  • NAID: 170000130726
  • Peer Reviewed
• [Journal Article] Security Authorization Scheme for Web Applications (2015)
  • Author(s): Takamichi Saito, Daichi Miyata, Takafumi Watanabe, Yuta Nishikura
  • Journal Title: The International Conference on Network-Based Information Systems (NBiS) 2015, Volume: 無し Pages: 250-256
  • Peer Reviewed
• [Journal Article] リリースされたバイナリに適用するスタックベースBoF攻撃緩和技術の試作と評価 (ver.2) (2015)
  • Author(s): 齋藤孝道, 上原崇史, 金子洋平, 角田佳史, 堀洋輔, 馬場隆彰, 宮崎博行
  • Journal Title: The International Conference on Network-Based Information Systems (NBiS) 2015, Volume: 無し
  • NAID: 110009877663
• [Journal Article] Study on Diffusion of Protection/Mitigation against Memory Corruption Attack in Linux Distributions (2015)
  • Author(s): Takamichi Saito, Hiroyuki Miyazaki, Takaaki Baba, Yoshifumi Sumida, Yosuke Hori
  • Journal Title: Proc. of the 9th International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing (IMIS) 2015 Volume: 無し
  • Peer Reviewed
• [Journal Article] A Survey of Hardware Features in Modern Browsers: 2015 Edition (2015)
  • Author(s): Ko Takasu, Takamichi Saito, Tomotaka Yamada, Takayuki Ishikawa
  • Journal Title: Proc. of the 9th International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing (IMIS) 2015 Volume: 無し
  • Peer Reviewed
• [Journal Article] 暗号モジュールを搭載したプロセッサにおける暗号処理の オフローディング方式の効率化の提案と評価 (2015)
  • Author(s): Yohei Kaneko, Takamichi Saito, Hiroaki Kikuchi,
  • Journal Title: 情報処理学会論文誌 Volume: ?
  • NAID: 170000130726
  • Acknowledgement Compliant
• [Presentation] Scalability of Privacy-Preserving Linear Regression in Epidemiological Studies (2015)
  • Author(s): Hiroaki Kikuchi, Takamichi Saito, Hideki Hashimoto, Hideo Yasunagawa
  • Organizer: Proc. of the 29th IEEE International Conference on Advanced Information Networking and Applications (AINA) 2015
  • Place of Presentation: 韓国
  • Year and Date: 2015-03-25 – 2015-03-27
• [Presentation] Cryptographic Operation Load-balancing Between Cryptographic Module and CPU (2015)
  • Author(s): Yohei Kaneko, Takamichi Saito, Hiroaki Kikuchi
  • Organizer: Proc. of the 29th IEEE International Conference on Advanced Information Networking and Applications (AINA) 2015
  • Place of Presentation: 韓国
  • Year and Date: 2015-03-25 – 2015-03-27
• [Presentation] A Proposal and Implementation of an ID Federation that Conceals a Web Service from an Authentication Server (2015)
  • Author(s): Yuto Iso, Takamichi Saito,
  • Organizer: Proc. of the 29th IEEE International Conference on Advanced Information Networking and Applications (AINA) 2015
  • Place of Presentation: 韓国
  • Year and Date: 2015-03-25 – 2015-03-27
• [Presentation] Webブラウザ毎に分類した時間経過に伴うWeb Browser Fingerprintの変化の分析， (2015)
  • Author(s): 石川貴之，磯 侑斗，桐生直輝，塚本耕司，高須 航，山田智隆，武居直樹，細井理央，齋藤孝道
  • Organizer: 情報処理学会
  • Place of Presentation: 京都大学
  • Year and Date: 2015-03-17 – 2015-03-19
• [Presentation] 端末にインストールされているフォント情報を用いたOSとアプリケーションの特定， (2015)
  • Author(s): 塚本耕司，磯侑斗，桐生直輝，高須航，山田智隆，武居直樹，細井理央，石川貴之，齋藤孝道
  • Organizer: 情報処理学会
  • Place of Presentation: 福岡
  • Year and Date: 2015-01-20 – 2015-01-22
• [Remarks] OAuthの仕組み丸分かり体験サイト
  • URL: https://www.saitolab.org/oauth/
• [Remarks] Web Browser Fingerprint解説ページ
  • URL: https://www.saitolab.org/fp_site/
• [Remarks] Webアプリケーションの脆弱性の解説＆体験ページ
  • URL: https://www.saitolab.org/taiken/
• [Remarks] Fingerprinting Research
  • URL: https://www.saitolab.org/fingerprint/