Fingerprinting Information in JavaScript Implementations. Keaton Mowery, Dillon Bogenreif, Scott Yilek, and Hovav Shacham

Size: px

Start display at page:

Download "Fingerprinting Information in JavaScript Implementations. Keaton Mowery, Dillon Bogenreif, Scott Yilek, and Hovav Shacham"

Beverly Taylor
5 years ago
Views:

1 Fingerprinting Information in JavaScript Implementations Keaton Mowery, Dillon Bogenreif, Scott Yilek, and Hovav Shacham

2 Authentication Usernames and Passwords weakening Third-party data loss can compromise your user accounts

3 Extra Authentication Two-Factor Authentication Secure but inconvenient User Fingerprinting Geolocation Browser Metadata System Architecture Browser Environment

4 Fingerprinting for Good and Evil User Authentication Protect high-value accounts User Identification Deanonymize, track across sessions

5 Browser Metadata Examine and record browser family, version, and operating system If the configuration changes, check for account compromise Easy data to collect

6 Many Techniques for Browser Fingerprinting

7 Near Future NoScript Whitelist Fingerprinting JavaScript Performance Fingerprinting

8 Near Future NoScript Whitelist Fingerprinting JavaScript Performance Fingerprinting

9 Extension Verification Users customize browser behavior with extensions Previously-observed extension behavior provides an identity signal Sudden absence of extensions increases likelihood of account hijack

contents are user-defined Radical changes may

10 NoScript NoScript provides JavaScript policy Default Deny Whitelisted domains may execute code Whitelist contents are user-defined Radical changes may indicate account hijack Entries could reveal private information

11 Example NoScript Probe <html> <head> <script type="text/javascript" src=" js/tooltips/tooltiploader.js"> </script> <script type="text/javascript"> if ("XML_STATUS_OKAY" in window) { // google.com can run JavaScript } else { // google.com cannot run JavaScript } </script> </head><body></body> </html>

12 Example NoScript Probe <html> <head> <script type="text/javascript" src=" js/tooltips/tooltiploader.js"> </script> <script type="text/javascript"> if ("XML_STATUS_OKAY" in window) { // google.com can run JavaScript } else { // google.com cannot run JavaScript } </script> </head><body></body> </html>

13 Example NoScript Probe <html> <head> <script type="text/javascript" src=" js/tooltips/tooltiploader.js"> </script> <script type="text/javascript"> if ("XML_STATUS_OKAY" in window) { // google.com can run JavaScript } else { // google.com cannot run JavaScript } </script> </head><body></body> </html>

14 At Scale Crawled Alexa Top 1,000 Domains Generated 689 whitelist probes Created test suite for all 689 domains 120s with NoScript disabled 23s with NoScript enabled

15 Near Future NoScript Whitelist Fingerprinting JavaScript Performance Fingerprinting

16 Near Future NoScript Whitelist Fingerprinting JavaScript Performance Fingerprinting

17 JavaScript Fingerprinting Fingerprint JavaScript performance 1. Measure time to execute various JS snippets 2. Normalize to build fingerprint vector Unforgeable Agnostic to JavaScript features

18 Snippet Selection Off-the-Shelf JavaScript Benchmarks 26 tests from SunSpider 9 tests from V8 Benchmark Suite 4 custom tests Benchmarks characterize browser performance

19 Browser Detection

20 Ask Everyone You Know Collected 1,015 data samples on Amazon Mechanical Turk JavaScript Fingerprint User reported: Operating System CPU Architecture, Speed, and Cores RAM

21 Browser Classification 24 Major Browser Versions Chrome, Firefox, IE, Safari, Opera, SeaMonkey Generated characteristic fingerprint for each 79.8% accuracy on all 1,015 samples

22 Chrome Versioning Over 85% of misclassifications Chrome 6.0 to Chrome 11.0 in 7+ months Chrome Chrome Chrome Chrome Chrome Chrome

23 Operating System Detection Small effect on fingerprints Examined 403 Firefox 3.6 samples Windows: 98.5% correct OS X: 100% correct Linux: 25% correct

24 Processor Architecture Detection Unavailable through JavaScript APIs JITs expose low-level behavior 15 processor architectures Core 2, Pentium Dual Core, Pentium 4, Athlon % accuracy

25 Conclusions NoScript Whitelist Fingerprinting Extensions can be fingerprinted User-defined state can be extracted JavaScript Performance Fingerprinting Proof-of-concept based on JS benchmarks Browser, OS, and Architecture detection Unforgable fingerprint

26 Thank You! Questions?

HTML5 MOCK TEST HTML5 MOCK TEST I

HTML5 MOCK TEST HTML5 MOCK TEST I http://www.tutorialspoint.com HTML5 MOCK TEST Copyright tutorialspoint.com This section presents you various set of Mock Tests related to HTML5 Framework. You can download these sample mock tests at your