Rendez-vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information
15-17 mai 2019 Erquy (France)

Sponsors

Un événement

GDR Sécurité Informatique

Organisé par 

Inria
Browser fingerprinting for web authentication, a large-scale empirical analysis
Tompoariniaina Andriamilanto  1@  , Gaëtan Le Guelvouit, Tristan Allard@
1 : Institut de Recherche Technologique b-com  (IRT b-com)  -  Site web
INRIA-IRISA
ZAC des Champs Blancs – 1219 avenue Champs Blancs – 35510 – Cesson-Sévigné -  France

Nowadays, web authentication relies mainly on passwords, which are now deemed as insecure due to many flaws. These lead to an increase of effectiveness of replay, brute force or dictionary attacks, bringing the need for supplementary web authentication factors. In the meantime, browser fingerprinting technique gains more and more attention. It consists into probing and aggregating web browser attributes, called vectors, in order to build a single browser fingerprint. In this work, we investigate the use of browser fingerprints as a web authentication factor, through the analysis of a large-scale fingerprint dataset (3,578,167 browser fingerprints composed of 216 attributes). We evaluate browser fingerprints according to usual properties of an authentication factor, namely: security, usability, and deployability. We conclude that browser fingerprints are a promising secondary web authentication factor.


Personnes connectées : 1