Gervais, Arthur;
Shokri, Reza;
Singla, Adish;
Capkun, Srdjan;
Lenders, Vincent;
(2014)
Quantifying Web-Search Privacy.
In:
Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security.
(pp. pp. 966-977).
Association for Computing Machinery (ACM): Scottsdale, AZ, USA.
Preview |
Text
ccs_gervais.pdf - Other Download (477kB) | Preview |
Abstract
Web search queries reveal extensive information about users’ personal lives to the search engines and Internet eavesdroppers. Obfuscating search queries through adding dummy queries is a practical and user-centric protection mechanism to hide users’ search intentions and interests. Despite few such obfuscation methods and tools, there is no generic quantitative methodology for evaluating users’ web-search privacy. In this paper, we provide such a methodology. We formalize adversary’s background knowledge and attacks, the users’ privacy objectives, and the algorithms to evaluate effectiveness of query obfuscation mechanisms. We build upon machine-learning algorithms to learn the linkability between user queries. This encompasses the adversary’s knowledge about the obfuscation mechanism and the users’ web-search behavior. Then, we quantify privacy of users with respect to linkage attacks. Our generic attack can run against users for which the adversary does not have any background knowledge, as well as for the cases where some prior queries from the target users are already observed. We quantify privacy at the query level (the link between user’s queries) and the semantic level (user’s topics of interest). We design a generic tool that can be used for evaluating generic obfuscation mechanisms, and users with different web search behavior. To illustrate our approach in practice, we analyze and compare privacy of users for two example obfuscation mechanisms on a set of real web-search logs.
Type: | Proceedings paper |
---|---|
Title: | Quantifying Web-Search Privacy |
Event: | CCS'14: 2014 ACM SIGSAC Conference on Computer and Communications Security |
Open access status: | An open access version is available from UCL Discovery |
DOI: | 10.1145/2660267.2660367 |
Publisher version: | https://dl.acm.org/doi/10.1145/2660267.2660367 |
Language: | English |
Additional information: | This version is the author accepted manuscript. For information on re-use, please refer to the publisher’s terms and conditions. |
Keywords: | Web Search; Privacy; Obfuscation; Quantification Framework; Query Privacy; Semantic Privacy; Machine Learning |
UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science |
URI: | https://discovery.ucl.ac.uk/id/eprint/10182351 |
Archive Staff Only
View Item |