论文标题
要了解现场的第一方曲奇跟踪
Towards Understanding First-Party Cookie Tracking in the Field
论文作者
论文摘要
第三方网络跟踪是网络上常见且广泛使用的技术。几乎每个用户的步骤都会在不同的用例中（例如在线广告）进行跟踪，分析和后来使用。已经出现了不同的防御机制来应对这些实践（例如，浏览器供应商最近禁止所有第三方饼干的步骤）。但是，所有这些对策仅针对第三方跟踪器，而忽略第一方，因为叙述是这种监视大多用于改善利用服务（例如，分析服务）。 在本文中，我们提出了一项大规模的测量研究，该研究分析了第一方执行的跟踪，但第三方用于规避预防技术的标准跟踪（即，第一方以第三方的名义执行跟踪）。我们访问了前15,000个网站，以分析用于跟踪用户的第一方饼干和一种称为“ DNS Cname Cloaking”的技术，第三方可以将其用于放置第一方饼干。使用这些数据，我们表明，数据集中的76％的站点有效地利用了这种跟踪技术，在长期进行的分析中，我们表明，这种饼干的用法在2021年中增加了50％以上。此外，我们阐明了生态系统的启示，该生态系统利用了固定的田径手，并找到了已经固定的跟踪器，并且可以避免使用此类跟踪器，以避免使用这种跟踪，以避免进行跟踪。
Third-party web tracking is a common, and broadly used technique on the Web. Almost every step of users' is tracked, analyzed, and later used in different use cases (e.g., online advertisement). Different defense mechanisms have emerged to counter these practices (e.g., the recent step of browser vendors to ban all third-party cookies). However, all of these countermeasures only target third-party trackers, and ignore the first party because the narrative is that such monitoring is mostly used to improve the utilized service (e.g., analytical services). In this paper, we present a large-scale measurement study that analyzes tracking performed by the first party but utilized by a third party to circumvent standard tracking preventing techniques (i.e., the first party performs the tracking in the name of the third party). We visit the top 15,000 websites to analyze first-party cookies used to track users and a technique called "DNS CNAME cloaking", which can be used by a third party to place first-party cookies. Using this data, we show that 76% sites in our dataset effectively utilize such tracking techniques, and in a long-running analysis, we show that the usage of such cookies increased by more than 50% over 2021. Furthermore, we shed light on the ecosystem utilizing first-party trackers, and find that the established trackers already use such tracking, presumably to avoid tracking blocking.
