Privacy diffusion on the web: a longitudinal perspective

ABSTRACT

For the last few years we have been studying the diffusion of private information for users as they visit various Web sites triggering data gathering aggregation by third parties. This paper reports on our longitudinal study consisting of multiple snapshots of our examination of such diffusion over four years. We examine the various technical ways by which third-party aggregators acquire data and the depth of user-related information acquired. We study techniques for protecting privacy diffusion as well as limitations of such techniques. We introduce the concept of secondary privacy damage. Our results show increasing aggregation of user-related data by a steadily decreasing number of entities. A handful of companies are able to track users' movement across almost all of the popular Web sites. Virtually all the protection techniques have significant limitations highlighting the seriousness of the problem and the need for alternate solutions.

REFERENCES

• 1: Adblock plus: Save your time and traffic. http://adblockplus.org/
• 2: C. Albanesius. Microsoft tips {IE8} privacy features, August 26 2008. http://www.pcmag.com/article2/0,2817,2328900,00.asp
• 3: Alexa: Most popular web sites. http://www.alexa.com/
• 4: Cuil -- your privacy. http://www.cuil.com/privacy/
• 5: W. Davis. Polish on google's new chrome tarnished by privacy questions, September 2, 2008. http://www.mediapost.com/publications/index.cfm?fa=Articles.showArticle&art_aid$
• 6: S. DeDeo. Pagestats, May 2006. http://www.cs.wpi.edu/cew/pagestats/
• 7: European union directive 95/46/{EC}. http://www.cdt.org/privacy/eudirective/EU_Directive.html, 1995.
• 8: A. Greenberg. Going 'incongnito' can you really web browse on the down low?, September 5, 2008. http://www.newsweek.com/id/157293?tid=relatedcl
• 9: I'm A Super.Com. Flash cookies: The silent privacy killer, October 9 2008. http://www.imasuper.com/66/technology/flash-cookies-the-silent-privacy-killer/
• 10: Collin Jackson , Andrew Bortz , Dan Boneh , John C. Mitchell, Protecting browser state from web privacy attacks, Proceedings of the 15th international conference on World Wide Web, May 23-26, 2006, Edinburgh, Scotland [doi>10.1145/1135777.1135884]
• 11: Balachander Krishnamurthy , Delfina Malandrino , Craig E. Wills, Measuring privacy loss and the impact of privacy protection in web browsing, Proceedings of the 3rd symposium on Usable privacy and security, July 18-20, 2007, Pittsburgh, Pennsylvania [doi>10.1145/1280680.1280688]
• 12: Balachander Krishnamurthy , Craig E. Wills, Cat and mouse: content delivery tradeoffs in web access, Proceedings of the 15th international conference on World Wide Web, May 23-26, 2006, Edinburgh, Scotland [doi>10.1145/1135777.1135829]
• 13: Balachander Krishnamurthy , Craig E. Wills, Generating a privacy footprint on the internet, Proceedings of the 6th ACM SIGCOMM conference on Internet measurement, October 25-27, 2006, Rio de Janeriro, Brazil [doi>10.1145/1177080.1177088]
• 14: Balachander Krishnamurthy , Craig E. Wills, Characterizing privacy in online social networks, Proceedings of the first workshop on Online social networks, August 18-18, 2008, Seattle, WA, USA [doi>10.1145/1397735.1397744]
• 15: Michael Afergan and Thomson Leighton and Timothy Johnson and Brian Mancuso and Ken Iwamoto. Method of data collection among participating content providers in a distributed network, 2008. United States Patent Application 20080092058. http://www.freepatentsonline.com/y2008/0092058.html
• 16: Mike On Ads. How do behavioral networks work?, February 28 2007. http://www.mikeonads.com/2007/02/28/how-do-behavioral-networks-work/
• 17: Noscript. https://addons.mozilla.org/firefox/722/
• 18: S. Olsen and T. Krazit. Dell embraces google, May 25, 2006. http://news.cnet.com/Dell-embraces-Google/2100-1032_3-6077051.html
• 19: Pests clasified in the category tracking cookie. http://www.pestpatrol.com/zks/pestinfo/tracking_cookie.asp
• 20: Privacy on the web: Is it a losing battle?, June 25, 2008. Published in Knowledge@Wharton. http://knowledge.wharton.upenn.edu/article.cfm?articleid=1999
• 21: P. Whoriskey. Candidates' web sites get to know the voters presidential campaigns tailor, target ads based on visitors' online habits, August 30 2008. http://www.washingtonpost.com/wp-dyn/content/article/2008/08/29/AR2008082903178
• 22: Consumer tips: How to opt-out of cookies that track you. http://www.worldprivacyforum.org/cookieoptout.html

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.2 Network Protocols
          Subjects: Applications (SMTP, FTP, etc.)

General Terms:
Measurement

Keywords:
privacy, privacy enhancing technologies