diff --git a/studies.md b/studies.md index 36a0578..f5e8d08 100644 --- a/studies.md +++ b/studies.md @@ -1,6 +1,6 @@ # Studies using OpenWPM -As of October 2020 OpenWPM has been used in 76 studies. +As of July 2026 OpenWPM has been used in 142 studies. Year | Venue | Study -----|-------|------ @@ -75,11 +75,76 @@ Year | Venue | Study 2020 | TMA | [Clash of the Trackers: Measuring the Evolution of the Online Tracking Ecosystem](https://tma.ifip.org/2020/wp-content/uploads/sites/9/2020/06/tma2020-camera-paper36.pdf) 2020 | WEIS | [The Impact of the GDPR on Content Providers](https://weis2020.econinfosec.org/wp-content/uploads/sites/8/2020/06/weis20-final43.pdf) 2020 | PhD Thesis, University of Michigan | [Enhancing System Transparency, Trust, and Privacy with Internet Measurement](https://benvds.com/papers/dissertation.pdf) +2020 | Preprint | [Tracking Measurement Obfuscations from SourceURL](https://arxiv.org/pdf/2005.10392) +2020 | UG Thesis | [Measuring the Cookie-Setting Behaviour of Web Pages Showing Privacy Warnings](https://project-archive.inf.ed.ac.uk/ug4/20201889/ug4_proj.pdf) 2020 | Masters Thesis, Concordia University | [A Large-Scale Evaluation of Privacy Practices of Public WiFi Captive Portals](https://users.encs.concordia.ca/~mmannan/student-resources/Thesis-MASc-AliSuzan-2020.pdf) 2020 | IEEE Globecom | [A machine learning approach for detecting CNAME cloaking-based tracking on the Web](https://arxiv.org/pdf/2009.14330.pdf) 2021 | NDSS | [Reining in the Web’s Inconsistencies with Site Policy](https://swag.cispa.saarland/papers/calzavara2021reining.pdf) 2021 | PETS | [Unveiling Web Fingerprinting in the Wild Via Code Mining and Machine Learning](https://petsymposium.org/2021/files/papers/popets-2021-0004.pdf) 2021 | IEEE S&P | [Fingerprinting the Fingerprinters: Learning to Detect Browser Fingerprinting Behaviors](https://arxiv.org/abs/2008.04480) +2021 | IEEE S&P | [Detecting Filter List Evasion With Event-Loop-Turn Granularity JavaScript Signatures](https://www.doc.ic.ac.uk/~livshits/papers/pdf/oakland21.pdf) +2021 | IFIP SEC | [Accept All: The Landscape of Cookie Banners in Greece and the UK](https://arxiv.org/pdf/2104.05750) +2021 | ICWSM | [Under the Spotlight: Web Tracking in Indian Partisan News Websites](https://arxiv.org/pdf/2102.03656) +2021 | ACM WebSci | [Differential Tracking Across Topical Webpages of Indian News Media](https://arxiv.org/pdf/2103.04442) +2021 | PETS | [A Calculus of Tracking: Theory and Practice](https://www.petsymposium.org/2021/files/papers/issue2/popets-2021-0027.pdf) +2021 | WPES | [Cookie Banners, What’s the Purpose? Analyzing Cookie Banner Text Through a Legal Lens](https://arxiv.org/pdf/2110.02597) +2021 | WWW | [Towards Realistic and Reproducible Web Crawl Measurements](https://www.doc.ic.ac.uk/~livshits/papers/pdf/www21a.pdf) +2021 | PhD Dissertation, Princeton University | [Identifying and Measuring Manipulative User Interfaces at Scale on the Web](https://dataspace.princeton.edu/handle/88435/dsp012f75rc09f) +2021 | Bachelor’s Thesis, Radboud University | [Cookie Compliance of Dutch Hospital Websites](https://www.cs.ru.nl/bachelors-theses/2021/Alessandra_van_Veen___4683382___Cookie_Compliance_of_Dutch_Hospital_Websites.pdf) +2021 | Excel@FIT | [Platform for measurement of JavaScript APIs usage on a web](http://excel.fit.vutbr.cz/submissions/2021/015/15.pdf) +2021 | Preprint | [Mutual Hyperlinking Among Misinformation Peddlers](https://arxiv.org/pdf/2104.11694) +2022 | NDSS | [HARPO: Learning to Subvert Online Behavioral Advertising](https://web.cs.ucdavis.edu/~zubair/files/harpo-ndss2022.pdf) +2022 | ICSE | [Exploiting Input Sanitization for Regex Denial of Service](https://davisjam.github.io/files/publications/BarlasDuDavis-WebREDOS-ICSE2022.pdf) +2022 | CoNEXT | [Analysing and strengthening OpenWPM's reliability](https://arxiv.org/pdf/2205.08890) +2022 | PETS | [ATOM: Ad-network Tomography](https://petsymposium.org/2022/files/papers/issue4/popets-2022-0110.pdf) +2022 | arXiv | [Nowhere to Hide: Detecting Obfuscated Fingerprinting Scripts](https://arxiv.org/pdf/2206.13599) +2022 | Sicherheit | [Towards Understanding First-Party Cookie Tracking in the Field](https://arxiv.org/pdf/2202.01498) +2022 | arXiv | [Domain-Level Detection and Disruption of Disinformation](https://arxiv.org/pdf/2205.03338) +2022 | WWW | [Et tu, Brute? Privacy Analysis of Government Websites and Mobile Apps](http://users.encs.concordia.ca/~mmannan/publications/govt-privacy-WWW2022.pdf) +2022 | PrivacyCon | [Toward (Greater) Consumer Surveillance in a 'Cookie-less' World](https://www.ftc.gov/system/files/ftc_gov/pdf/PrivacyCon-2022-Parham-Toward-Greater-Consumer-Surveillance-in-a-Cookie-less-World.pdf) +2022 | WTMC | [Got Sick and Tracked: Privacy Analysis of Hospital Websites](http://users.encs.concordia.ca/~mmannan/publications/hospitals-privacy-wtmc22.pdf) +2022 | DPM | [No salvation from trackers: Privacy analysis of religious websites and mobile apps](https://users.encs.concordia.ca/~mmannan/publications/Religious-sites-DPM2022.pdf) +2022 | USENIX Security | [KHALEESI: Breaker of Advertising and Tracking Request Chains](https://web.cs.ucdavis.edu/~zubair/files/khaleesi-usec2022.pdf) +2022 | USENIX Security | [Leaky Forms: A Study of Email and Password Exfiltration Before Form Submission](https://www.usenix.org/system/files/sec22-senol.pdf) +2022 | PETS | [My Cookie is a phoenix: detection, measurement, and lawfulness of cookie respawning with browser fingerprinting](https://petsymposium.org/popets/2022/popets-2022-0063.pdf) +2022 | Computers & Security | [Privacy Protection of China's Top Websites: A Multi-layer Privacy Measurement via Network Behaviours and Privacy Policies](https://www.sciencedirect.com/science/article/pii/S0167404822000050) +2022 | Master's Thesis, Radboud University | [Evading the Policy: a measurement on referrer policy circumvention in 3k e-commerce websites](https://www.cs.ru.nl/masters-theses/2022/T_van_Ouwerkerk___Evading_the_policy:_a_measurement_on_referrer_policy_circumvention_in_3k_e-commerce_websites.pdf) +2022 | PhD Thesis, ETH Zurich | [Automated Detection of GDPR Violations in Cookie Notices Using Machine Learning](https://www.research-collection.ethz.ch/bitstream/handle/20.500.11850/575741/1/BouhoulaAhmed.pdf) +2023 | USENIX Security | [Glowing in the Dark Uncovering IPv6 Address Discovery and Scanning Strategies in the Wild](https://arxiv.org/pdf/2210.02522) +2023 | CCS | [COOKIEGRAPH: Understanding and Detecting First-Party Tracking Cookies](https://dl.acm.org/doi/epdf/10.1145/3576915.3616586) +2023 | PhD Thesis | [Leveraging Security Data for a Quantitative Evaluation of Security Mitigation Strategies](https://iris.unitn.it/bitstream/11572/374972/1/ditizio-thesis.pdf) +2023 | IMC | [Your Echos are Heard: Tracking, Profiling, and Ad Targeting in the Amazon Smart Speaker Ecosystem](https://arxiv.org/pdf/2204.10920) +2023 | IMC | [Thou Shalt Not Reject: Analyzing Accept-Or-Pay Cookie Banners on the Web](https://www.devashishgosain.com/assets/files/paper-cameraready.pdf) +2023 | PETS | [Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites](https://petsymposium.org/popets/2023/popets-2023-0002.pdf) +2023 | PETS | [Evaluating practical QUIC website fingerprinting defenses for the masses](https://petsymposium.org/popets/2023/popets-2023-0099.pdf) +2023 | PETS | [Comparing Large-Scale Privacy and Security Notifications](https://swag.cispa.saarland/papers/utz2023notifications.pdf) +2023 | PETS | [Evaluating practical QUIC website fingerprinting defenses for the masses](https://petsymposium.org/popets/2023/popets-2023-0099.pdf) +2023 | NordSec | [No Place to Hide: Privacy Exposure in Anti-Stalkerware Apps and Support Websites](http://users.encs.concordia.ca/~mmannan/publications/IPV-helper-privacy-Nordsec2023.pdf) +2023 | Master's Thesis, Radboud University | [leak-detect: Automatic login form leakage detection for website administrators and researchers](https://www.cs.ru.nl/masters-theses/2023/S_Wallis_de_Vries___Leak-detect:_automatic_login_form_leakage_detection_for_website_administrators_and_researchers.pdf) +2023 | PAM | [Exploring the Cookieverse: A Multi-Perspective Analysis of Web Cookies](https://arxiv.org/pdf/2302.05353) +2024 | USENIX Security | [Automated, Large-Scale Analysis of Cookie Notice Compliance](https://www.usenix.org/system/files/usenixsecurity24-bouhoula.pdf) +2024 | PETS | [Opted Out, Yet Tracked: Are Regulations Enough to Protect Your Privacy?](https://petsymposium.org/popets/2024/popets-2024-0016.pdf) +2024 | PETS | [A Bilingual Longitudinal Analysis of Privacy Policies Measuring the Impacts of the GDPR and the CCPA/CPRA](https://petsymposium.org/popets/2024/popets-2024-0058.pdf) +2024 | PhD Thesis; University of Maryland | [Understanding and Addressing Online Tracking](https://drum.lib.umd.edu/bitstreams/a4f7a1a8-90f3-4404-8ec0-4802fc03ac29/download) +2024 | WWW | [AdFlush: A Real-World Deployable Machine Learning Solution for Effective Advertisement and Web Tracker Prevention](https://seclab.skku.edu/wp-content/uploads/2024/03/rfp2363-lee.pdf) +2024 | MSc Thesis | [PRIVACY AND SECURITY ANALYSIS OF VIRTUAL SHOPPING AND AI COMPANION PLATFORMS](https://users.encs.concordia.ca/~mmannan/student-resources/Thesis-MASc-Ragab-2024.pdf) +2024 | IEEE S&P | [SINBAD: Saliency-informed detection of breakage caused by ad blocking](https://arxiv.org/pdf/2405.05196) +2024 | USENIX Security | [PURL: Safe and Effective Sanitization of Link Decoration](https://arxiv.org/pdf/2308.03417) +2024 | PETS | [A Large-Scale Study of Cookie Banner Interaction Tools and Their Impact on Users' Privacy](https://petsymposium.org/popets/2024/popets-2024-0002.pdf) +2024 | PETS | [The Devil is in the Details: Detection, Measurement and Lawfulness of Server-Side Tracking on the Web](https://petsymposium.org/popets/2024/popets-2024-0125.pdf) +2025 | IMC | [Towards a Non-Binary View of IPv6 Adoption](https://dl.acm.org/doi/epdf/10.1145/3730567.3764467) +2025 | FOCI | [Probing the third-party infrastructure of digital news on the Web](https://petsymposium.org/foci/2025/foci-2025-0017.pdf) +2025 | PLOS ONE | [Analysis of web tracking and geolocation of German-language health websites](https://journals.plos.org/plosone/article%3Fid%3D10.1371/journal.pone.0323462) +2025 | IMC | [FP-Inconsistent: Measurement and Analysis of Fingerprint Inconsistencies in Evasive Bot Traffic](https://hariv.github.io/files/fpinconsistent.pdf) +2025 | arXiv | [The WASM Cloak: Evaluating Browser Fingerprinting Defenses Under WebAssembly based Obfuscation](https://arxiv.org/pdf/2508.21219) +2025 | PETS | [Web Privacy based on Contextual Integrity: Measuring the Collapse of Online Contexts](https://arxiv.org/pdf/2412.16246) +2025 | PETS | [Understanding Regional Filter Lists: Efficacy and Impact](https://petsymposium.org/popets/2025/popets-2025-0063.pdf) +2025 | arXiv | [Digital Gatekeeping: An Audit of Search Engine Results shows tailoring of queries on the Israel-Palestine Conflict](https://arxiv.org/pdf/2502.04266) +2025 | PETS | [Unmasking the Shadows: A Cross-Country Study of Online Tracking in Illegal Movie Streaming Services](https://petsymposium.org/popets/2025/popets-2025-0053.pdf) +2025 | WWW | [The First Early Evidence of the Privacy-Invasive Use of Browser Fingerprinting for Online Tracking](https://arxiv.org/pdf/2409.15656) +2025 | WPES | [Exploring the Enforcement of Cookie Notices across Continents: An Empirical Study](https://hal.science/hal-05315594v1/file/Exploring_the_Enforcement_of_Cookie_Notices_across_Continents__An_Empirical_Study-WPES25.pdf) +2026 | ICWSM | [Turning Trust to Transactions: Tracking Affiliate Marketing and FTC Compliance in YouTube's Influencer Economy](https://ojs.aaai.org/index.php/ICWSM/article/view/42748/50308) + † Uses [Princeton Web Census](https://web.archive.org/web/20230512145159/https://webtap.princeton.edu/) data collected using OpenWPM.