JavaScript Engine FingerprintingJavaScript引擎.pdfVIP

Fast and Reliable Browser Identification with JavaScript Engine Fingerprinting Martin Mulazzani , Philipp Reschl , Markus Huber , Manuel Leithner, Sebastian Schrittwieser and Edgar Weippl SBA Research Vienna, Austria FH Campus Wien Vienna, Austria Abstract—Web browsers are crucial software components While today’s browsers interpret a website’s code in in today’s usage of the Internet, but the reliable detection similar ways (based on standards), the actual implementations of whether a client is using a specific browser can still be of these standards differ. This diversity of browsers has considered a nontrivial problem. Reliable browser identification is crucial for online security and privacy e.g., regarding drive-by always caused headaches for Web developers, as the same downloads and user tracking, and can be used to enhance the website can vary across different browsers with respect to user’s security. So far the UserAgent string is often used to functionality or appearance, requiring additional testing and identify a given browser, but it is a self-reported string provided debugging of a website’s code in order to ensure correct by the client and can be changed arbitrarily. functionality in relevant browsers. However, this can also In this paper we propose a new method for identifying web have severe