<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-02612461</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-18T17:26:14+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Taming The Shape Shifter: Detecting Anti-fingerprinting Browsers</title>
            <author role="aut">
              <persName>
                <forename type="first">Babak</forename>
                <surname>Amin Azad</surname>
              </persName>
              <idno type="halauthorid">1858380-0</idno>
              <affiliation ref="#struct-159816"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Oleksii</forename>
                <surname>Starov</surname>
              </persName>
              <idno type="halauthorid">1858381-0</idno>
              <affiliation ref="#struct-1031063"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Pierre</forename>
                <surname>Laperdrix</surname>
              </persName>
              <email type="md5">02903c8199dd730cb56a921dde286929</email>
              <email type="domain">inria.fr</email>
              <idno type="idhal" notation="string">pierre-laperdrix</idno>
              <idno type="idhal" notation="numeric">184121</idno>
              <idno type="halauthorid" notation="string">24643-184121</idno>
              <idno type="IDREF">https://www.idref.fr/221615008</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-6901-3596</idno>
              <affiliation ref="#struct-410272"/>
              <affiliation ref="#struct-432644"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Nick</forename>
                <surname>Nikiforakis</surname>
              </persName>
              <idno type="halauthorid">869377-0</idno>
              <affiliation ref="#struct-159816"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Pierre</forename>
                <surname>Laperdrix</surname>
              </persName>
              <email type="md5">02903c8199dd730cb56a921dde286929</email>
              <email type="domain">inria.fr</email>
            </editor>
            <funder>We thank the anonymous reviewers for their helpful feedback. This work was partially supported by a gift from Amazon and the National ScienceFoundation (NSF) under grants CNS-1813974, CNS-1617902, and CMMI-1842020.</funder>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2020-05-19 10:55:05</date>
              <date type="whenModified">2025-10-27 09:34:02</date>
              <date type="whenReleased">2020-05-20 09:11:32</date>
              <date type="whenProduced">2020-06-24</date>
              <date type="whenEndEmbargoed">2020-05-19</date>
              <ref type="file" target="https://hal.science/hal-02612461v1/document">
                <date notBefore="2020-05-19"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-02612461v1/file/antifpbrowsers-dimva20.pdf" id="file-2612461-2447096">
                <date notBefore="2020-05-19"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="309085">
                <persName>
                  <forename>Pierre</forename>
                  <surname>Laperdrix</surname>
                </persName>
                <email type="md5">02903c8199dd730cb56a921dde286929</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-02612461</idno>
            <idno type="halUri">https://hal.science/hal-02612461</idno>
            <idno type="halBibtex">aminazad:hal-02612461</idno>
            <idno type="halRefHtml">&lt;i&gt;DIMVA 2020 - 17th Conference on Detection of Intrusions and Malware &amp; Vulnerability Assessment&lt;/i&gt;, Jun 2020, Lisboa / Virtual, Portugal</idno>
            <idno type="halRef">DIMVA 2020 - 17th Conference on Detection of Intrusions and Malware &amp; Vulnerability Assessment, Jun 2020, Lisboa / Virtual, Portugal</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-2612461-2447096"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="INRIA-LILLE">INRIA Lille - Nord Europe</idno>
            <idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="CRISTAL">Centre de Recherche en Informatique, Signal et Automatique de Lille (CRISTAL)</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="CRISTAL-SPIRALS" corresp="CRISTAL">CRISTAL-SPIRALS</idno>
            <idno type="stamp" n="UNIV-LILLE">Université de Lille</idno>
            <idno type="stamp" n="TEST-HALCNRS">Collection test HAL CNRS</idno>
            <idno type="stamp" n="INRIA-ETATSUNIS">Copublications Inria-Etats-Unis</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Taming The Shape Shifter: Detecting Anti-fingerprinting Browsers</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Babak</forename>
                    <surname>Amin Azad</surname>
                  </persName>
                  <idno type="halauthorid">1858380-0</idno>
                  <affiliation ref="#struct-159816"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Oleksii</forename>
                    <surname>Starov</surname>
                  </persName>
                  <idno type="halauthorid">1858381-0</idno>
                  <affiliation ref="#struct-1031063"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Pierre</forename>
                    <surname>Laperdrix</surname>
                  </persName>
                  <email type="md5">02903c8199dd730cb56a921dde286929</email>
                  <email type="domain">inria.fr</email>
                  <idno type="idhal" notation="string">pierre-laperdrix</idno>
                  <idno type="idhal" notation="numeric">184121</idno>
                  <idno type="halauthorid" notation="string">24643-184121</idno>
                  <idno type="IDREF">https://www.idref.fr/221615008</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-6901-3596</idno>
                  <affiliation ref="#struct-410272"/>
                  <affiliation ref="#struct-432644"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Nick</forename>
                    <surname>Nikiforakis</surname>
                  </persName>
                  <idno type="halauthorid">869377-0</idno>
                  <affiliation ref="#struct-159816"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>DIMVA 2020 - 17th Conference on Detection of Intrusions and Malware &amp; Vulnerability Assessment</title>
                  <date type="start">2020-06-24</date>
                  <date type="end">2020-06-26</date>
                  <settlement>Lisboa / Virtual</settlement>
                  <country key="PT">Portugal</country>
                </meeting>
                <imprint/>
              </monogr>
              <relatedItem target="https://doi.org/10.1007/978-3-030-52683-2_8" type="Cites" subtype="http://purl.org/coar/resource_type/c_1843"/>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info.info-wb">Computer Science [cs]/Web</classCode>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>When it comes to leaked credentials and credit card information, we observe the development and use of anti-fingerprinting browsers by malicious actors. These tools are carefully designed to evade detection, often by mimicking the browsing environment of the victim whose credentials were stolen. Even though these tools are popular in the underground markets, they have not received enough attention by researchers. In this paper, we report on the first evaluation of four underground, commercial, and research anti-fingerprinting browsers and highlight their high success rate in bypassing browser fingerprinting. Despite their success against well-known fingerprinting methods and libraries, we show that even slightest variation in the simulated fingerprint compared to the real ones can give away the presence of anti-fingerprinting tools. As a result, we provide techniques and fingerprint-based signatures that can be used to detect the current generation of anti-fingerprinting browsers.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-159816" status="VALID">
          <orgName>Department of Computer Science [Stonybrook - NY]</orgName>
          <desc>
            <address>
              <addrLine>Department of Computer Science * Stony Brook University, Stony Brook, NY 11794-4400</addrLine>
              <country key="US"/>
            </address>
            <ref type="url">http://www.cs.sunysb.edu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-303386" type="direct"/>
            <relation active="#struct-361557" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-1031063" status="VALID">
          <orgName>Palo Alto Networks</orgName>
          <desc>
            <address>
              <country key="US"/>
            </address>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-410272" status="VALID">
          <idno type="IdRef">18388695X</idno>
          <idno type="RNSR">201521249L</idno>
          <idno type="ROR">https://ror.org/05vrs3189</idno>
          <idno type="Wikidata">Q116959497</idno>
          <orgName>Centre de Recherche en Informatique, Signal et Automatique de Lille - UMR 9189</orgName>
          <orgName type="acronym">CRIStAL</orgName>
          <date type="start">2015-01-01</date>
          <desc>
            <address>
              <addrLine>Université de Lille - Campus scientifique - Bâtiment ESPRIT - Avenue Henri Poincaré - 59655 Villeneuve d’Ascq</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cristal.univ-lille.fr/</ref>
          </desc>
          <listRelation>
            <relation name="UMR9189" active="#struct-120930" type="direct"/>
            <relation name="UMR9189" active="#struct-374570" type="direct"/>
            <relation name="UMR9189" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-432644" status="VALID">
          <idno type="RNSR">201421121B</idno>
          <idno type="ROR">https://ror.org/03eyty988</idno>
          <orgName>Self-adaptation for distributed services and large software systems</orgName>
          <orgName type="acronym">SPIRALS</orgName>
          <date type="start">2015-01-01</date>
          <date type="end">2026-06-30</date>
          <desc>
            <address>
              <addrLine>Centre Inria de l'Université de Lille ,170 Av. de Bretagne, 59000 Lille</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/equipes/spirals</ref>
          </desc>
          <listRelation>
            <relation active="#struct-104752" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-410272" type="direct"/>
            <relation name="UMR9189" active="#struct-120930" type="indirect"/>
            <relation name="UMR9189" active="#struct-374570" type="indirect"/>
            <relation name="UMR9189" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-303386" status="VALID">
          <idno type="ISNI">0000 0001 2216 9681</idno>
          <idno type="ROR">https://ror.org/05qghxh33</idno>
          <orgName>Stony Brook University [SUNY]</orgName>
          <orgName type="acronym">SBU</orgName>
          <desc>
            <address>
              <addrLine>100 Nicolls Road, Stony Brook, NY 11794</addrLine>
              <country key="US"/>
            </address>
            <ref type="url">http://www.stonybrook.edu</ref>
          </desc>
          <listRelation>
            <relation active="#struct-361557" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-361557" status="VALID">
          <idno type="IdRef">026425157</idno>
          <idno type="ROR">https://ror.org/01q1z8k08</idno>
          <orgName>State University of New York</orgName>
          <orgName type="acronym">SUNY</orgName>
          <desc>
            <address>
              <country key="US"/>
            </address>
            <ref type="url">http://www.suny.edu/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-120930" status="VALID">
          <idno type="IdRef">256304629</idno>
          <idno type="ISNI">0000000122034461</idno>
          <idno type="ROR">https://ror.org/01x441g73</idno>
          <orgName>Centrale Lille</orgName>
          <desc>
            <address>
              <addrLine>École Centrale de Lille - Cité Scientifique - CS 20048 59651 Villeneuve d'Ascq Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://centralelille.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-374570" status="VALID">
          <idno type="IdRef">223446556</idno>
          <idno type="ISNI">0000 0001 2242 6780</idno>
          <idno type="ROR">https://ror.org/02kzqn938</idno>
          <idno type="Wikidata">Q3551621</idno>
          <orgName>Université de Lille</orgName>
          <desc>
            <address>
              <addrLine>EPE Université de Lille. -- 42 rue Paul Duez, 59000 Lille</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.univ-lille.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-104752" status="VALID">
          <idno type="RNSR">200818245B</idno>
          <idno type="ROR">https://ror.org/04eej9726</idno>
          <orgName>Centre Inria de l'Université de Lille</orgName>
          <desc>
            <address>
              <addrLine>Parc Scientifique de la Haute Borne 40, avenue Halley Bât.A, Park Plaza 59650 Villeneuve d'Ascq</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/lille/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>