A Two-Step TLS-Based Browser fingerprinting approach using combinatorial sequences. Issue 114 (March 2022)

• Record Type: Journal Article
• Authors: Garn, Bernhard; Zauner, Stefan; Simos, Dimitris E.; Leithner, Manuel; Kuhn, Richard; Kacker, Raghu
• Is Part Of: Computers & security. Issue 114(2022)
• Publication Date: 2022-03
• Subjects: Browser fingerprinting -- TLS Protocol -- Combinatorial sequences -- Anonymity set -- Fraud detection; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2021.102575
• Languages: English
• ISSNs: 0167-4048

Abstract

Highlights: Browser Fingerprinting. TLS Protocol. Combinatorial Sequences. Graphical abstract: Abstract: We propose a two-step TLS-based fingerprinting approach using combinatorial sequences and properties of TLS handshake messages. Our approach combines fingerprinting based on attributes of the initial ClientHello message with the observed behavior of TLS clients when presented with permuted handshake messages in order to enhance the granularity of the derived fingerprints without increasing the required number of exchanged messages. We conduct a detailed evaluation against 21 browsers and TLS clients on two operating systems. The results show a significant increase in the entropy of the achieved splittings, allowing for a more precise identification of the TLS client than permitted by either of the underlying approaches in isolation.