Enterprise-grade protection against e-mail tracking. Issue 97 (March 2021)

• Record Type: Journal Article
• Authors: Fabian, Benjamin; Bender, Benedict; Hesseldieck, Ben; Haupt, Johannes; Lessmann, Stefan
• Is Part Of: Information systems. Issue 97(2021)
• Publication Date: 2021-03
• Subjects: Database management -- Periodicals; Electronic data processing -- Periodicals; Bases de données -- Gestion -- Périodiques; Informatique -- Périodiques; Database management; Electronic data processing; Periodicals; 005.7
• DOI: 10.1016/j.is.2020.101702
• Languages: English
• ISSNs: 0306-4379

Abstract

Abstract: E-mail tracking provides companies with fine-grained behavioral data about e-mail recipients, which can be a threat for individual privacy and enterprise security. This problem is especially severe since e-mail tracking techniques often gather data without the informed consent of the recipients. So far e-mail recipients lack a reliable protection mechanism. This article presents a novel protection framework against e-mail tracking that closes an important gap in the field of enterprise security and privacy-enhancing technologies. We conceptualize, implement and evaluate an anti-tracking mail server that is capable of identifying tracking images in e-mails via machine learning with very high accuracy, and can selectively replace them with arbitrary images containing warning messages for the recipient. Our mail protection framework implements a selective prevention strategy as enterprise-grade software using the design science research paradigm. It is flexibly extensible, highly scalable, and ready to be applied under actual production conditions. Experimental evaluations show that these goals are achieved through solid software design, adoption of recent technologies and the creation of novel flexible software components. Highlights: Conceptualization of a novel protection framework against e-mail tracking. First server-side implementation of reliable e-mail tracking protection. Framework shows a high accuracy without any manual user effort. Framework is developed as enterprise-grade software (extensible, scalable).