Don’t count me out: On the relevance of IP addresses in the tracking ecosystem

Mishra, Vikas; Laperdrix, Pierre; Vastel, Antoine; Rudametkin, Walter; Rouvoy, Romain; Lopatka, Martin

Document type :

Communication dans un congrès avec actes

DOI :

10.1145/3366423.3380161

Title :

Don’t count me out: On the relevance of IP addresses in the tracking ecosystem

Author(s) :

Mishra, Vikas [Auteur]
Self-adaptation for distributed services and large software systems [SPIRALS]
Laperdrix, Pierre [Auteur]

Self-adaptation for distributed services and large software systems [SPIRALS]
Vastel, Antoine [Auteur]
Self-adaptation for distributed services and large software systems [SPIRALS]
Rudametkin, Walter [Auteur]

Self-adaptation for distributed services and large software systems [SPIRALS]
Rouvoy, Romain [Auteur]

Self-adaptation for distributed services and large software systems [SPIRALS]
Institut universitaire de France [IUF]
Lopatka, Martin [Auteur]

Scientific editor(s) :

Bruno Crispo
Nick Nikiforakis

Conference title :

The Web Conference 2020

City :

Tapeï

Country :

Taïwan

Start date of the conference :

2020-04-20

Journal title :

Proceedings of The Web Conference (WWW'20)

Publication date :

2020-04-20

English keyword(s) :

Online tracking
Privacy
IP Address tracking

HAL domain(s) :

Informatique [cs]/Web

English abstract : [en]

Targeted online advertising has become an inextricable part of the way Web content and applications are monetized. At the beginning, online advertising consisted of simple ad-banners broadly shown to website visitors. Over ...
Show more >Targeted online advertising has become an inextricable part of the way Web content and applications are monetized. At the beginning, online advertising consisted of simple ad-banners broadly shown to website visitors. Over time, it evolved into a complex ecosystem that tracks and collects a wealth of data to learn user habits and show targeted and personalized ads. To protect users against tracking, several countermeasures have been proposed, ranging from browser extensions that leverage filter lists, to features natively integrated into popular browsers like Firefox and Brave to combat more modern techniques like browser fingerprinting. Nevertheless, few browsers offer protections against IP address-based tracking techniques. Notably, the most popular browsers, Chrome, Firefox, Safari and Edge do not offer any.In this paper, we study the stability of the public IP addresses a user device uses to communicate with our server. Over time, a same device communicates with our server using a set of distinct IP addresses, but we find that devices reuse some of their previous IP addresses for long periods of time. We call this IP address retention and, the duration for which an IP address is retained by a device, is named theIP address retention period.We present an analysis of 34,488 unique public IP addresses collected from 2,230 users over a period of 111 days and we show that IP addresses remain a prime vector for online tracking. 87 % of participants retain at least one IP address for more than a month and 45 % of ISPs in our dataset allow keeping the same IP address for more than 30 days. Furthermore, we also detect the presence of cycles of IP addresses in a user’s history and highlight their potential to be abused to infer traits of the user behaviour, as well as mobility traces. Our findings paint a bleak picture of the current state of online tracking at a time where IP addresses are overlooked compared to other techniques like cookies or fingerprinting.Show less >

Language :

Anglais

Peer reviewed article :

Oui

Audience :

Internationale

Popular science :

Non

ANR Project :

Comprendre et diagnostiquer les dégradations des communications de bout en bout dans l'Internet
FP-Locker : Renforcer l'authentification web grâce aux empreintes de navigateur

Collections :

Centre de Recherche en Informatique, Signal et Automatique de Lille (CRIStAL) - UMR 9189

Source :

Harvested from HAL

Files

https://hal.inria.fr/hal-02435622/document
Open access
Access the document

https://hal.inria.fr/hal-02435622/document
Open access
Access the document

https://hal.inria.fr/hal-02435622/document
Open access
Access the document

document
Open access
Access the document

mishra-www20.pdf
Open access
Access the document

mishra-www20.pdf
Open access
Access the document

document
Open access
Access the document

mishra-www20.pdf
Open access
Access the document

Don’t count me out: On the relevance of ... BibTeX CSV Excel RIS

Files

Don’t count me out: On the relevance of ...

BibTeX

CSV

Excel

RIS