Web Privacy course

Lectures

Dates: Monday, September 17 to Friday, September 21, 2018
Time: at 10:00 and 14:00
Language: English
Instructor: Nataliia Bielova, researcher at Inria (France)

Schedule

Date	Topic	Reading	Slides
September 17, 10:00	Introduction to Privacy and Course organization	'I've Got Nothing to Hide' and Other Misunderstandings of Privacy by Daniel J. Solov. San Diego Law Review, Vol. 44, p. 745, 2007. Unpacking “Privacy” for a Networked World. Leysia Palen and Paul Dourish. CHI 2003.	Slides Slides of V. Roca
September 17, 14:00	Web browsers and Web applications	Same Origin Policy. W3C Web Security Wiki, 2010. On the Incoherencies of Web Browser Access Control Policies. Kapil Singh, Alexander Moshchuk, Helen Wang, Wenke Lee. IEEE Symposium on Security and Privacy (IEEE S&P) 2010.	Slides
September 18, 10:00	Web Tracking technologies: Cookies	Flash Cookies and Privacy II: Now with HTML5 and ETag Respawning. Mika D Ayenson, Dietrich James Wambach, Ashkan Soltani, Nathan Good and Chris Jay Hoofnagle. 2011. Detecting and Defending Against Third-Party Tracking on the Web. Franziska Roesner, Tadayoshi Kohno, and David Wetherall. 9th USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2012. Third-Party Web Tracking: Policy and Technology Jonathan R. Mayer and John C. Mitchell. IEEE Symposium on Security and Privacy (IEEE S&P),2012. Online tracking: A 1-million-site measurement and analysis. S. Englehardt and A. Narayanan. ACM CCS 2016. Who Left Open the Cookie Jar? A Comprehensive Evaluation of Third-Party Cookie Policies. Gertjan Franken, Tom Van Goethem, Wouter Joosen. USENIX Security 2018.	Slides
September 18, 14:00	Web Tracking technologies: Browser fingerprinting	How Unique is Your Web Browser? P. Eckersley. In Proceedings of the 10th International Conference on Privacy Enhancing Technologies, PETS 2010. Beauty and the Beast: Diverting modern web browsers to build unique browser fingerprints. P. Laperdrix, W. Rudametkin, and B. Baudry. IEEE Symposium on Security and Privacy, 2016. FP-STALKER: Tracking Browser Fingerprint Evolutions. A. Vastel, P. Laperdrix, W. Rudametkin ,and R. Rouvoy. IEEE Symposium on Security and Privacy 2018. Hiding in the Crowd: an Analysis of the Effectiveness of Browser Fingerprinting at Large Scale. A. Gomez-Boix, P. Laperdrix, and B. Baudry. WWW 2018. To Extend or not to Extend: on the Uniqueness of Browser Extensions and Web Logins. Gábor György Gulyás, Dolière Francis Somé, Nataliia Bielova and Claude Castelluccia. Workshop on Privacy in the Electronic Society (WPES 2018) at ACM CCS 2018. XHOUND: Quantifying the Fingerprintability of Browser Extensions, Oleksii Starov and Nick Nikiforakis. Proceedings of the 38th IEEE Symposium on Security and Privacy (IEEE S&P), 2017.	Slides Slides of A. Vastel
September 19, 10:00 and 14:00	Protection from Web Tracking	Block Me If You Can: A Large-Scale Study of Tracker-Blocking Tools, Georg Merzdovnik, Markus Huber, Damjan Buhov, Nick Nikiforakis, Sebastian Neuner, Martin Schmiedecker, Edgar Weippl, IEEE European Symposium on Security and Privacy (IEEE EuroS&P), 2017. Your Secrets are Safe: How Browsers’ Explanations Impact Misconceptions About Private Browsing Mode. Yuxi Wu, Panya Gupta, Miranda Wei, Yasemin Acar, Sascha Fahl, Blase Ur. WWW 2018. Control What You Include! Server-Side Protection against Third Party Web Tracking. Dolière Francis Somé, Nataliia Bielova and Tamara Rezk. International Symposium on Engineering Secure Software and Systems (EssoS 2017)	Slides Extensions Fingerprinting
September 20, 10:00 and 14:00	Privacy in Targeted advertising and Ads explanations	The web never forgets: Persistent tracking mechanisms in the wild. Gunes Acar, Christian Eubank, Steven Englehardt, Marc Juarez, Arvind Narayanan, Claudia Diaz. ACM CCS 2014. Tracing Information Flows Between Ad Exchanges Using Retargeted Ads. Muhammad Ahmad Bashir, Sajjad Arshad, William Robertson, and Christo Wilson USENIX Security 2016. Privacy Risks with Facebook's PII-based Targeting: Auditing a Data Broker's Advertising Interface. Giridhari Venkatadri, Yabing Liu, Athanasios Andreou, Oana Goga, Patrick Loiseau, Alan Mislove, and Krishna P. Gummadi. IEEE Symposium on Security and Privacy (IEEE S&P), 2018. Investigating Ad Transparency Mechanisms in Social Media: A Case Study of Facebook's Explanations Athanasios Andreou, Giridhari Venkatadri, Oana Goga, Krishna P. Gummadi, Patrick Loiseau, and Alan Mislove Network and Distributed System Security Symposium (NDSS), 2018.	Slides Slides of O.Goga
September 21, 10:00	Privacy and smartphones	Should You Use the App for That? Comparing the Privacy Implications of App- and Web-based Online ServicesChristophe Leung, Jingjing Ren, David Choffnes, Christo Wilson. ACM IMC 2016. Short Paper: WifiLeaks: Underestimated Privacy Implications of the ACCESS_WIFI_STATE Android Permission. J. Achara, M. Cunche, V. Roca, A. Francillon. ACM WiSec 2014.	Slides
September 21, 14:00	Usability of privacy policies, privacy notice and choice	A large-scale evaluation of US financial institutions’ standardized privacy notices. Lorrie Faith Cranor,Pedro Giovanni Leon,and Blase Ur. ACM Transactions on the Web (TWEB), 2016. The cost of reading privacy policies. Aleecia M. McDonald and Lorrie Faith Cranor. I/S: A Journal of Law and Policy for the Information Society 4, 3 (2008). An Automated Approach to Auditing Disclosure of Third-Party Data Collection in Website Privacy Policies, Timothy Libert, The Web Conference (WWW2018), 2018.	Slides
Extra materials	Cross-device tracking	Cross-Device Tracking: Measurement and Disclosures. Justin Brookman, Phoebe Rouge, Aaron Alva, and Christina Yeung. PETs 2017. A Privacy Analysis of Cross-device Tracking. Sebastian Zimmeck, Jie S. Li, Hyungtae Kim, Steven M. Bellovin, and Tony Jebara. USENIX Security Symposium (USENIX Security), 2017. Apps, Trackers, Privacy, and Regulators: A Global Study of the Mobile Tracking Ecosystem Abbas Razaghpanah, Rishab Nithyanand, Narseo Vallina-Rodriguez, Srikanth Sundaresan, Mark Allman, Christian Kreibich, Phillipa Gill. NDSS 2018.