Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
67 changes: 66 additions & 1 deletion studies.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Studies using OpenWPM

As of October 2020 OpenWPM has been used in 76 studies.
As of July 2026 OpenWPM has been used in 142 studies.

Year | Venue | Study
-----|-------|------
Expand Down Expand Up @@ -75,11 +75,76 @@ Year | Venue | Study
2020 | TMA | [Clash of the Trackers: Measuring the Evolution of the Online Tracking Ecosystem](https://tma.ifip.org/2020/wp-content/uploads/sites/9/2020/06/tma2020-camera-paper36.pdf)
2020 | WEIS | [The Impact of the GDPR on Content Providers](https://weis2020.econinfosec.org/wp-content/uploads/sites/8/2020/06/weis20-final43.pdf)
2020 | PhD Thesis, University of Michigan | [Enhancing System Transparency, Trust, and Privacy with Internet Measurement](https://benvds.com/papers/dissertation.pdf)
2020 | Preprint | [Tracking Measurement Obfuscations from SourceURL](https://arxiv.org/pdf/2005.10392)
2020 | UG Thesis | [Measuring the Cookie-Setting Behaviour of Web Pages Showing Privacy Warnings](https://project-archive.inf.ed.ac.uk/ug4/20201889/ug4_proj.pdf)
2020 | Masters Thesis, Concordia University | [A Large-Scale Evaluation of Privacy Practices of Public WiFi Captive Portals](https://users.encs.concordia.ca/~mmannan/student-resources/Thesis-MASc-AliSuzan-2020.pdf)
2020 | IEEE Globecom | [A machine learning approach for detecting CNAME cloaking-based tracking on the Web](https://arxiv.org/pdf/2009.14330.pdf)
2021 | NDSS | [Reining in the Web’s Inconsistencies with Site Policy](https://swag.cispa.saarland/papers/calzavara2021reining.pdf)
2021 | PETS | [Unveiling Web Fingerprinting in the Wild Via Code Mining and Machine Learning](https://petsymposium.org/2021/files/papers/popets-2021-0004.pdf)
2021 | IEEE S&P | [Fingerprinting the Fingerprinters: Learning to Detect Browser Fingerprinting Behaviors](https://arxiv.org/abs/2008.04480)
2021 | IEEE S&P | [Detecting Filter List Evasion With Event-Loop-Turn Granularity JavaScript Signatures](https://www.doc.ic.ac.uk/~livshits/papers/pdf/oakland21.pdf)
2021 | IFIP SEC | [Accept All: The Landscape of Cookie Banners in Greece and the UK](https://arxiv.org/pdf/2104.05750)
2021 | ICWSM | [Under the Spotlight: Web Tracking in Indian Partisan News Websites](https://arxiv.org/pdf/2102.03656)
2021 | ACM WebSci | [Differential Tracking Across Topical Webpages of Indian News Media](https://arxiv.org/pdf/2103.04442)
2021 | PETS | [A Calculus of Tracking: Theory and Practice](https://www.petsymposium.org/2021/files/papers/issue2/popets-2021-0027.pdf)
2021 | WPES | [Cookie Banners, What’s the Purpose? Analyzing Cookie Banner Text Through a Legal Lens](https://arxiv.org/pdf/2110.02597)
2021 | WWW | [Towards Realistic and Reproducible Web Crawl Measurements](https://www.doc.ic.ac.uk/~livshits/papers/pdf/www21a.pdf)
2021 | PhD Dissertation, Princeton University | [Identifying and Measuring Manipulative User Interfaces at Scale on the Web](https://dataspace.princeton.edu/handle/88435/dsp012f75rc09f)
2021 | Bachelor’s Thesis, Radboud University | [Cookie Compliance of Dutch Hospital Websites](https://www.cs.ru.nl/bachelors-theses/2021/Alessandra_van_Veen___4683382___Cookie_Compliance_of_Dutch_Hospital_Websites.pdf)
2021 | Excel@FIT | [Platform for measurement of JavaScript APIs usage on a web](http://excel.fit.vutbr.cz/submissions/2021/015/15.pdf)
2021 | Preprint | [Mutual Hyperlinking Among Misinformation Peddlers](https://arxiv.org/pdf/2104.11694)
2022 | NDSS | [HARPO: Learning to Subvert Online Behavioral Advertising](https://web.cs.ucdavis.edu/~zubair/files/harpo-ndss2022.pdf)
2022 | ICSE | [Exploiting Input Sanitization for Regex Denial of Service](https://davisjam.github.io/files/publications/BarlasDuDavis-WebREDOS-ICSE2022.pdf)
2022 | CoNEXT | [Analysing and strengthening OpenWPM's reliability](https://arxiv.org/pdf/2205.08890)
2022 | PETS | [ATOM: Ad-network Tomography](https://petsymposium.org/2022/files/papers/issue4/popets-2022-0110.pdf)
2022 | arXiv | [Nowhere to Hide: Detecting Obfuscated Fingerprinting Scripts](https://arxiv.org/pdf/2206.13599)
2022 | Sicherheit | [Towards Understanding First-Party Cookie Tracking in the Field](https://arxiv.org/pdf/2202.01498)
2022 | arXiv | [Domain-Level Detection and Disruption of Disinformation](https://arxiv.org/pdf/2205.03338)
2022 | WWW | [Et tu, Brute? Privacy Analysis of Government Websites and Mobile Apps](http://users.encs.concordia.ca/~mmannan/publications/govt-privacy-WWW2022.pdf)
2022 | PrivacyCon | [Toward (Greater) Consumer Surveillance in a 'Cookie-less' World](https://www.ftc.gov/system/files/ftc_gov/pdf/PrivacyCon-2022-Parham-Toward-Greater-Consumer-Surveillance-in-a-Cookie-less-World.pdf)
2022 | WTMC | [Got Sick and Tracked: Privacy Analysis of Hospital Websites](http://users.encs.concordia.ca/~mmannan/publications/hospitals-privacy-wtmc22.pdf)
2022 | DPM | [No salvation from trackers: Privacy analysis of religious websites and mobile apps](https://users.encs.concordia.ca/~mmannan/publications/Religious-sites-DPM2022.pdf)
2022 | USENIX Security | [KHALEESI: Breaker of Advertising and Tracking Request Chains](https://web.cs.ucdavis.edu/~zubair/files/khaleesi-usec2022.pdf)
2022 | USENIX Security | [Leaky Forms: A Study of Email and Password Exfiltration Before Form Submission](https://www.usenix.org/system/files/sec22-senol.pdf)
2022 | PETS | [My Cookie is a phoenix: detection, measurement, and lawfulness of cookie respawning with browser fingerprinting](https://petsymposium.org/popets/2022/popets-2022-0063.pdf)
2022 | Computers & Security | [Privacy Protection of China's Top Websites: A Multi-layer Privacy Measurement via Network Behaviours and Privacy Policies](https://www.sciencedirect.com/science/article/pii/S0167404822000050)
2022 | Master's Thesis, Radboud University | [Evading the Policy: a measurement on referrer policy circumvention in 3k e-commerce websites](https://www.cs.ru.nl/masters-theses/2022/T_van_Ouwerkerk___Evading_the_policy:_a_measurement_on_referrer_policy_circumvention_in_3k_e-commerce_websites.pdf)
2022 | PhD Thesis, ETH Zurich | [Automated Detection of GDPR Violations in Cookie Notices Using Machine Learning](https://www.research-collection.ethz.ch/bitstream/handle/20.500.11850/575741/1/BouhoulaAhmed.pdf)
2023 | USENIX Security | [Glowing in the Dark Uncovering IPv6 Address Discovery and Scanning Strategies in the Wild](https://arxiv.org/pdf/2210.02522)
2023 | CCS | [COOKIEGRAPH: Understanding and Detecting First-Party Tracking Cookies](https://dl.acm.org/doi/epdf/10.1145/3576915.3616586)
2023 | PhD Thesis | [Leveraging Security Data for a Quantitative Evaluation of Security Mitigation Strategies](https://iris.unitn.it/bitstream/11572/374972/1/ditizio-thesis.pdf)
2023 | IMC | [Your Echos are Heard: Tracking, Profiling, and Ad Targeting in the Amazon Smart Speaker Ecosystem](https://arxiv.org/pdf/2204.10920)
2023 | IMC | [Thou Shalt Not Reject: Analyzing Accept-Or-Pay Cookie Banners on the Web](https://www.devashishgosain.com/assets/files/paper-cameraready.pdf)
2023 | PETS | [Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites](https://petsymposium.org/popets/2023/popets-2023-0002.pdf)
2023 | PETS | [Evaluating practical QUIC website fingerprinting defenses for the masses](https://petsymposium.org/popets/2023/popets-2023-0099.pdf)
2023 | PETS | [Comparing Large-Scale Privacy and Security Notifications](https://swag.cispa.saarland/papers/utz2023notifications.pdf)
2023 | PETS | [Evaluating practical QUIC website fingerprinting defenses for the masses](https://petsymposium.org/popets/2023/popets-2023-0099.pdf)
2023 | NordSec | [No Place to Hide: Privacy Exposure in Anti-Stalkerware Apps and Support Websites](http://users.encs.concordia.ca/~mmannan/publications/IPV-helper-privacy-Nordsec2023.pdf)
2023 | Master's Thesis, Radboud University | [leak-detect: Automatic login form leakage detection for website administrators and researchers](https://www.cs.ru.nl/masters-theses/2023/S_Wallis_de_Vries___Leak-detect:_automatic_login_form_leakage_detection_for_website_administrators_and_researchers.pdf)
2023 | PAM | [Exploring the Cookieverse: A Multi-Perspective Analysis of Web Cookies](https://arxiv.org/pdf/2302.05353)
2024 | USENIX Security | [Automated, Large-Scale Analysis of Cookie Notice Compliance](https://www.usenix.org/system/files/usenixsecurity24-bouhoula.pdf)
2024 | PETS | [Opted Out, Yet Tracked: Are Regulations Enough to Protect Your Privacy?](https://petsymposium.org/popets/2024/popets-2024-0016.pdf)
2024 | PETS | [A Bilingual Longitudinal Analysis of Privacy Policies Measuring the Impacts of the GDPR and the CCPA/CPRA](https://petsymposium.org/popets/2024/popets-2024-0058.pdf)
2024 | PhD Thesis; University of Maryland | [Understanding and Addressing Online Tracking](https://drum.lib.umd.edu/bitstreams/a4f7a1a8-90f3-4404-8ec0-4802fc03ac29/download)
2024 | WWW | [AdFlush: A Real-World Deployable Machine Learning Solution for Effective Advertisement and Web Tracker Prevention](https://seclab.skku.edu/wp-content/uploads/2024/03/rfp2363-lee.pdf)
2024 | MSc Thesis | [PRIVACY AND SECURITY ANALYSIS OF VIRTUAL SHOPPING AND AI COMPANION PLATFORMS](https://users.encs.concordia.ca/~mmannan/student-resources/Thesis-MASc-Ragab-2024.pdf)
2024 | IEEE S&P | [SINBAD: Saliency-informed detection of breakage caused by ad blocking](https://arxiv.org/pdf/2405.05196)
2024 | USENIX Security | [PURL: Safe and Effective Sanitization of Link Decoration](https://arxiv.org/pdf/2308.03417)
2024 | PETS | [A Large-Scale Study of Cookie Banner Interaction Tools and Their Impact on Users' Privacy](https://petsymposium.org/popets/2024/popets-2024-0002.pdf)
2024 | PETS | [The Devil is in the Details: Detection, Measurement and Lawfulness of Server-Side Tracking on the Web](https://petsymposium.org/popets/2024/popets-2024-0125.pdf)
2025 | IMC | [Towards a Non-Binary View of IPv6 Adoption](https://dl.acm.org/doi/epdf/10.1145/3730567.3764467)
2025 | FOCI | [Probing the third-party infrastructure of digital news on the Web](https://petsymposium.org/foci/2025/foci-2025-0017.pdf)
2025 | PLOS ONE | [Analysis of web tracking and geolocation of German-language health websites](https://journals.plos.org/plosone/article%3Fid%3D10.1371/journal.pone.0323462)
2025 | IMC | [FP-Inconsistent: Measurement and Analysis of Fingerprint Inconsistencies in Evasive Bot Traffic](https://hariv.github.io/files/fpinconsistent.pdf)
2025 | arXiv | [The WASM Cloak: Evaluating Browser Fingerprinting Defenses Under WebAssembly based Obfuscation](https://arxiv.org/pdf/2508.21219)
2025 | PETS | [Web Privacy based on Contextual Integrity: Measuring the Collapse of Online Contexts](https://arxiv.org/pdf/2412.16246)
2025 | PETS | [Understanding Regional Filter Lists: Efficacy and Impact](https://petsymposium.org/popets/2025/popets-2025-0063.pdf)
2025 | arXiv | [Digital Gatekeeping: An Audit of Search Engine Results shows tailoring of queries on the Israel-Palestine Conflict](https://arxiv.org/pdf/2502.04266)
2025 | PETS | [Unmasking the Shadows: A Cross-Country Study of Online Tracking in Illegal Movie Streaming Services](https://petsymposium.org/popets/2025/popets-2025-0053.pdf)
2025 | WWW | [The First Early Evidence of the Privacy-Invasive Use of Browser Fingerprinting for Online Tracking](https://arxiv.org/pdf/2409.15656)
2025 | WPES | [Exploring the Enforcement of Cookie Notices across Continents: An Empirical Study](https://hal.science/hal-05315594v1/file/Exploring_the_Enforcement_of_Cookie_Notices_across_Continents__An_Empirical_Study-WPES25.pdf)
2026 | ICWSM | [Turning Trust to Transactions: Tracking Affiliate Marketing and FTC Compliance in YouTube's Influencer Economy](https://ojs.aaai.org/index.php/ICWSM/article/view/42748/50308)



† Uses [Princeton Web Census](https://web.archive.org/web/20230512145159/https://webtap.princeton.edu/) data collected using OpenWPM.
Expand Down