Evaluating Websites and Their Adherence to Data Protection Principles: Tools and Experiences

Andersdotter, Amelia; Jensen-Urstad, Anders

doi:10.1007/978-3-319-55783-0_4

Cited by 10 publications

(3 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Eventually, the scientific literature such as [6] and [43] proves that many territorial collectivities are willing to participate in pilot projects regarding new PII management solutions. The administration and collectivities wish to enforce their status of authoritative entities providing digital services, and understand the need to be flawless regarding adequate PII protection for the users of SPs they offer, including by testing innovative solutions.…”

Section: Discussionmentioning

confidence: 99%

Personal information self-management: A survey of technologies supporting administrative services

Marillonnet,

Laurent,

Ates

2021

Preprint

View full text Add to dashboard Cite

This paper presents a survey of technologies for personal data self-management interfacing with administrative and territorial public service providers. It classifies a selection of scientific technologies into four categories of solutions: Personal Data Store (PDS), Identity Manager (IdM), Anonymous Certificate System and Access Control Delegation Architecture. Each category, along with its technological approach, is analyzed thanks to eighteen identified functional criteria that encompass architectural and communication aspects, as well as user data lifecycle considerations. The originality of the survey is multifold. First, as far as we know, there is no such thorough survey covering such a panel of a dozen of existing solutions. Second, it is the first survey addressing Personally Identifiable Information (PII) management for both administrative and private service providers. Third, this paper achieves a functional comparison of solutions of very different technical natures. The outcome of this paper is the clear identification of functional gaps of each solution. As a result, this paper establishes the research directions to follow in order to fill these functional gaps.

show abstract

Section: Discussionmentioning

confidence: 99%

Personal information self-management: A survey of technologies supporting administrative services

Marillonnet,

Laurent,

Ates

2021

Preprint

View full text Add to dashboard Cite

show abstract

“…Since Firefox version 88, this flag is not user-settable. 8 We override the getter function of the navigator.webdriver property in the same fashion as described in the previous section. To change Open-WPM default window settings, we introduce a settings file that makes the window size and position settable in OpenWPM.…”

Section: Rq8: Is Data Recording Complete?mentioning

confidence: 99%

Analysing and strengthening OpenWPM's reliability

Krumnow¹,

Jonker²,

Karsch³

2022

Preprint

View full text Add to dashboard Cite

Automated browsers are widely used to study the web at scale. Their premise is that they measure what regular browsers would encounter on the web. In practice, deviations due to detection of automation have been found. To what extent automated browsers can be improved to reduce such deviations has so far not been investigated in detail. In this paper, we investigate this for a specific web automation framework: OpenWPM, a popular research framework specifically designed to study web privacy. We analyse (1) detectability of OpenWPM, (2) prevalence of OpenWPM detection, and (3) integrity of OpenWPM's data recording.Our analysis reveals OpenWPM is easily detectable. We measure to what extent fingerprint-based detection is already leveraged against OpenWPM clients on 100,000 sites and observe that it is commonly detected (∼14% of front pages). Moreover, we discover integrated routines in scripts to specifically detect OpenWPM clients. Our investigation of Open-WPM's data recording integrity identifies novel evasion techniques and previously unknown attacks against OpenWPM's instrumentation. We investigate and develop mitigations to address the identified issues. In conclusion, we find that reliability of automation frameworks should not be taken for granted. Identifiability of such frameworks should be studied, and mitigations deployed, to improve reliability.

show abstract

“…However, so far, they can only provide an aggregate analysis at a specific point in time. Their ability to provide public transparency about the practices of individual companies over time, a common approach in the area of online tracking [1,9], is thus limited. We aim to fill this gap by designing and developing a public email privacy benchmarking system called PrivacyMail.…”

Section: Introductionmentioning

confidence: 99%

Towards Transparency in Email Tracking

Maaß

Schwär

Hollick

2019

Privacy Technologies and Policy

View full text Add to dashboard Cite

Tracking technologies have become ubiquitous, not only on websites but also in email messages. However, while protection and transparency tools exist for the web, no such tools exist for email messages, thus obscuring privacy violations. We introduce the PrivacyMail platform to assist with the automated analysis of email messages. The platform automatically analyzes commercial mailing lists, making it easier to detect different forms of tracking. Our platform introduces transparency about the practices of companies, and serves as a tool for regulators, data protection professionals and consumers alike. Our preliminary results show widespread email tracking, where opening an email can result in information being sent to up to 13 third parties, in some cases disclosing the users' email address in the process.

show abstract

Evaluating Websites and Their Adherence to Data Protection Principles: Tools and Experiences

Cited by 10 publications

References 1 publication

Personal information self-management: A survey of technologies supporting administrative services

Personal information self-management: A survey of technologies supporting administrative services

Analysing and strengthening OpenWPM's reliability

Towards Transparency in Email Tracking

Contact Info

Product

Resources

About