Please use this identifier to cite or link to this item: http://dx.doi.org/10.14279/depositonce-9381
Main Title: Tracing Cross Border Web Tracking
Author(s): Iordanou, Costas
Smaragdakis, Georgios
Poese, Ingmar
Laoutaris, Nikolaos
Type: Conference Object
Language Code: en
Abstract: A tracking flow is a flow between an end user and a Web tracking service. We develop an extensive measurement methodology for quantifying at scale the amount of tracking flows that cross data protection borders, be it national or international, such as the EU28 border within which the General Data Protection Regulation (GDPR) applies. Our methodology uses a browser extension to fully render advertising and tracking code, various lists and heuristics to extract well known trackers, passive DNS replication to get all the IP ranges of trackers, and state-of-the art geolocation. We employ our methodology on a dataset from 350 real users of the browser extension over a period of more than four months, and then generalize our results by analyzing billions of web tracking flows from more than 60 million broadband and mobile users from 4 large European ISPs. We show that the majority of tracking flows cross national borders in Europe but, unlike popular belief, are pretty well con ned within the larger GDPR jurisdiction. Simple DNS redirection and PoP mirroring can increase national confinement while sealing almost all tracking flows within Europe. Last, we show that cross boarder tracking is prevalent even in sensitive and hence protected data categories and groups including health, sexual orientation, minors, and others.
URI: https://depositonce.tu-berlin.de/handle/11303/10429
http://dx.doi.org/10.14279/depositonce-9381
Issue Date: 31-Oct-2018
Date Available: 4-Dec-2019
DDC Class: 000 Informatik, Informationswissenschaft, allgemeine Werke
Subject(s): GDPR
internet measurement
General Data Protection Regulation
tracking
privacy
network
Sponsor/Funder: EC/H2020/679158/EU/Resolving the Tussle in the Internet: Mapping, Architecture, and Policy Making/ResolutioNet
EC/H2020/786741/EU/GDPR Compliance Cloud Platform for Micro Enterprises/SMOOTH
License: http://rightsstatements.org/vocab/InC/1.0/
Proceedings Title: Proceedings of the Internet Measurement Conference 2018 - IMC '18
Publisher: Association for Computing Machinery (ACM)
Publisher Place: New York, NY
Publisher DOI: 10.1145/3278532.3278561
Page Start: 329
Page End: 342
ISBN: 978-1-4503-5619-0
Notes: © ACM 2018 . This is the author's version of the work. It is posted here for your personal use. Not for redistribution. The definitive Version of Record was published in Proceedings of the Internet Measurement Conference 2018 - IMC ’18, http://dx.doi.org/10.1145/3278532.3278561.
Appears in Collections:FG Internet Network Architectures (INET) » Publications

Files in This Item:
File Description SizeFormat 
iordanou_etal_2018.pdfAccepted manuscript2.01 MBAdobe PDFThumbnail
View/Open


Items in DepositOnce are protected by copyright, with all rights reserved, unless otherwise indicated.