{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,24]],"date-time":"2026-09-24T08:09:00Z","timestamp":1790237340844,"version":"4.1.0"},"publisher-location":"Cham","reference-count":53,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030299613","type":"print"},{"value":"9783030299620","type":"electronic"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-29962-0_18","type":"book-chapter","created":{"date-parts":[[2019,9,14]],"date-time":"2019-09-14T23:04:10Z","timestamp":1568502250000},"page":"367-386","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":15,"title":["GDPiRated \u2013 Stealing Personal Information On- and Offline"],"prefix":"10.1007","author":[{"given":"Matteo","family":"Cagnazzo","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thorsten","family":"Holz","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Norbert","family":"Pohlmann","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,9,15]]},"reference":[{"issue":"2","key":"18_CR1","doi-asserted-by":"publisher","first-page":"71","DOI":"10.1109\/MSP.2012.52","volume":"10","author":"M Bailey","year":"2012","unstructured":"Bailey, M., Dittrich, D., Kenneally, E., Maughan, D.: The menlo report. IEEE Secur. Priv. 10(2), 71\u201375 (2012)","journal-title":"IEEE Secur. Priv."},{"issue":"4","key":"18_CR2","doi-asserted-by":"publisher","first-page":"1017","DOI":"10.2307\/41409971","volume":"35","author":"F B\u00e9langer","year":"2011","unstructured":"B\u00e9langer, F., Crossler, R.E.: Privacy in the digital age: a review of information privacy research in information systems. MIS Q. 35(4), 1017\u20131042 (2011)","journal-title":"MIS Q."},{"key":"18_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"610","DOI":"10.1007\/978-3-319-70278-0_39","volume-title":"Financial Cryptography and Data Security","author":"Z Benenson","year":"2017","unstructured":"Benenson, Z., Gassmann, F., Landwirth, R.: Unpacking spear phishing susceptibility. In: Brenner, M., et al. (eds.) FC 2017. LNCS, vol. 10323, pp. 610\u2013627. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-70278-0_39"},{"key":"18_CR4","unstructured":"Bundeskriminalamt: Festnahme eines Tatverd\u00e4chtigen im Ermittlungsverfahren wegen des Verdachts des Aussp\u00e4hens und der unberechtigten Ver\u00f6ffentlichung personenbezogener Daten, January 2019. https:\/\/www.bka.de\/DE\/Presse\/Listenseite_Pressemitteilungen\/2019\/Presse2019\/190108_FestnahmeDatenausspaehung.html"},{"key":"18_CR5","unstructured":"Cagnazzo, M., Pohlmann, N.: Using geolocation data as a threat enlargener for social engineering attacks. In: DACH Security (2019)"},{"issue":"1","key":"18_CR6","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1109\/MSP.2013.106","volume":"12","author":"DD Caputo","year":"2013","unstructured":"Caputo, D.D., Pfleeger, S.L., Freeman, J.D., Johnson, M.E.: Going spear phishing: exploring embedded training and awareness. IEEE Secur. Priv. 12(1), 28\u201338 (2013)","journal-title":"IEEE Secur. Priv."},{"issue":"2","key":"18_CR7","doi-asserted-by":"publisher","first-page":"218","DOI":"10.3390\/ijerph16020218","volume":"16","author":"M Chen","year":"2019","unstructured":"Chen, M., Cheung, A.S.Y., Chan, K.L.: Doxing: what adolescents look for and their intentions. Int. J. Environ. Res. Public Health 16(2), 218 (2019)","journal-title":"Int. J. Environ. Res. Public Health"},{"key":"18_CR8","doi-asserted-by":"crossref","unstructured":"Degeling, M., Utz, C., Lentzsch, C., Hosseini, H., Schaub, F., Holz, T.: We value your privacy... now take some cookies: measuring the GDPR\u2019s impact on web privacy. In: Network and Distributed Systems Security (NDSS) (2018)","DOI":"10.14722\/ndss.2019.23378"},{"key":"18_CR9","doi-asserted-by":"crossref","unstructured":"Dittrich, D., Kenneally, E.: The menlo report: ethical principles guiding information and communication technology research. Technical report, US Department of Homeland Security (2012)","DOI":"10.2139\/ssrn.2445102"},{"issue":"3","key":"18_CR10","doi-asserted-by":"publisher","first-page":"199","DOI":"10.1007\/s10676-016-9406-0","volume":"18","author":"DM Douglas","year":"2016","unstructured":"Douglas, D.M.: Doxing: a conceptual analysis. Ethics Inf. Technol. 18(3), 199\u2013210 (2016)","journal-title":"Ethics Inf. Technol."},{"key":"18_CR11","doi-asserted-by":"crossref","unstructured":"Englehardt, S., Narayanan, A.: Online tracking: a 1-million-site measurement and analysis. In: ACM SIGSAC Conference on Computer and Communications Security, CCS 2016, pp. 1388\u20131401 (2016)","DOI":"10.1145\/2976749.2978313"},{"key":"18_CR12","doi-asserted-by":"crossref","unstructured":"Englehardt, S., et al.: Cookies that give you away: the surveillance implications of web tracking. In: International Conference on World Wide Web, WWW 2015, pp. 289\u2013299 (2015)","DOI":"10.1145\/2736277.2741679"},{"key":"18_CR13","unstructured":"European Commission: Special eurobarometer 431: Data protection, July 2015. http:\/\/data.europa.eu\/euodp\/en\/data\/dataset\/S2075_83_1_431_ENG"},{"key":"18_CR14","unstructured":"European Union: Council regulation art. 12 regulation (eu) 2016\/679 (2016)"},{"key":"18_CR15","unstructured":"European Union: Council regulation art. 15 regulation (eu) 2016\/679 (2016)"},{"key":"18_CR16","unstructured":"European Union: Council regulation art. 25 regulation (eu) 2016\/679 (2016)"},{"key":"18_CR17","unstructured":"European Union: Council regulation art. 4 regulation (eu) 2016\/679 (2016)"},{"key":"18_CR18","unstructured":"European Union: Council regulation art. 9 regulation (eu) 2016\/679 (2016)"},{"key":"18_CR19","unstructured":"Fuentes, M.R.: Cybercrime and other threats faced by the healthcare industry. Trend Micro (2017)"},{"key":"18_CR20","unstructured":"Geodakyan, G.S., Yen, Y.J.S., Foss, R.A., Hardy, J., Broen, W.D., Born, N.M.: Method and system for combining offline and online identities with associated purchasing intention indicators in view of a geographic location, US Patent App. 15\/712,036, 18 September 2018"},{"key":"18_CR21","unstructured":"Gluck, J., et al.: How short is too short? Implications of length and framing on the effectiveness of privacy notices. In: Symposium on Usable Privacy and Security (SOUPS), pp. 321\u2013340 (2016)"},{"key":"18_CR22","doi-asserted-by":"crossref","unstructured":"Gruss, D., et al.: Use-after-freemail: generalizing the use-after-free problem and applying it to email services. In: Proceedings of the 2018 on Asia Conference on Computer and Communications Security, pp. 297\u2013311. ACM (2018)","DOI":"10.1145\/3196494.3196514"},{"key":"18_CR23","unstructured":"Harkous, H., Fawaz, K., Lebret, R., Schaub, F., Shin, K.G., Aberer, K.: Polisis: automated analysis and presentation of privacy policies using deep learning. In: 27th USENIX Security Symposium (USENIX Security 18), pp. 531\u2013548 (2018)"},{"key":"18_CR24","unstructured":"Hern, A.: Fitness tracking app Strava gives away location of secret US armybases. Guardian, 28 (2018)"},{"key":"18_CR25","unstructured":"Hertlein, M.: Digitale identit\u00e4ten erfolgreich sch\u00fctzen, April 2019. https:\/\/www.security-insider.de\/digitale-identitaeten-erfolgreich-schuetzen-a-821563\/"},{"key":"18_CR26","unstructured":"Hu, H., Wang, G.: End-to-end measurements of email spoofing attacks. In: 27th USENIX Security Symposium, pp. 1095\u20131112 (2018)"},{"key":"18_CR27","unstructured":"Jansen, F.: Verd\u00e4chtiger nennt \u00c4rger \u00fcber Politiker als Motiv f\u00fcr Datenklau, January 2019. https:\/\/m.tagesspiegel.de\/politik\/datendiebstahl-verdaechtiger-nennt-aerger-ueber-politiker-als-motiv-fuer-datenklau\/23838452.html"},{"key":"18_CR28","doi-asserted-by":"crossref","unstructured":"Jensen, C., Potts, C.: Privacy policies as decision-making tools: an evaluation of online privacy notices. In: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, CHI 2004, pp. 471\u2013478 (2004)","DOI":"10.1145\/985692.985752"},{"key":"18_CR29","doi-asserted-by":"crossref","unstructured":"Klensin, J., Freed, N., Rose, M., Stefferud, E., Crocker, D.: SMTP service extensions. Technical report, RFC 2846, November 1995","DOI":"10.17487\/rfc1869"},{"key":"18_CR30","unstructured":"Linden, T., Harkous, H., Fawaz, K.: The privacy policy landscape after the GDPR. arXiv preprint arXiv:1809.08396 (2018)"},{"key":"18_CR31","unstructured":"Ponemon Institute, LLC: The race to GDPR: a study of companies in the United States & Europe. Technical report, McDermott Will & Emery LLP (2018)"},{"key":"18_CR32","unstructured":"Martino, M.D., Robyns, P., Weyts, W., Quax, P., Lamotte, W., Andries, K.: Personal information leakage by abusing the GDPR right of access. In: Symposium on Usable Privacy and Security (SOUPS) (2019)"},{"issue":"2","key":"18_CR33","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1109\/MSP.2010.67","volume":"8","author":"AM Matwyshyn","year":"2010","unstructured":"Matwyshyn, A.M., Cui, A., Keromytis, A.D., Stolfo, S.J.: Ethics in security vulnerability research. IEEE Secur. Priv. 8(2), 67\u201372 (2010)","journal-title":"IEEE Secur. Priv."},{"issue":"6","key":"18_CR34","doi-asserted-by":"publisher","first-page":"85","DOI":"10.1109\/MSP.2006.145","volume":"4","author":"P Mell","year":"2006","unstructured":"Mell, P., Scarfone, K., Romanosky, S.: Common vulnerability scoring system. IEEE Secur. Priv. 4(6), 85\u201389 (2006)","journal-title":"IEEE Secur. Priv."},{"key":"18_CR35","unstructured":"Mueller, R.: Report on the investigation into Russian interference in the 2016 presidential election. US Dept. of Justice. Washington, DC (2019)"},{"key":"18_CR36","unstructured":"Ollmann, G.: The phishing guide-understanding & preventing phishing attacks. NGS Software Insight Security Research (2004)"},{"key":"18_CR37","unstructured":"\u00d6sterreich, N.: Entwurf bundesgesetz \u00fcber sorgfalt und verantwortung im netz (2019). https:\/\/cdn.netzpolitik.org\/wp-upload\/2019\/04\/Digitales-Vermummungsverbot-Gesetzesentwurf.pdf"},{"key":"18_CR38","doi-asserted-by":"publisher","first-page":"9390","DOI":"10.1109\/ACCESS.2018.2799522","volume":"6","author":"A Papageorgiou","year":"2018","unstructured":"Papageorgiou, A., Strigkos, M., Politou, E., Alepis, E., Solanas, A., Patsakis, C.: Security and privacy analysis of mobile health applications: the alarming state of practice. IEEE Access 6, 9390\u20139403 (2018)","journal-title":"IEEE Access"},{"key":"18_CR39","unstructured":"Pascual, A., Marchini, K.: 2018 child identity fraud study, April 2018. https:\/\/www.javelinstrategy.com\/coverage-area\/2018-child-identity-fraud-study"},{"issue":"9","key":"18_CR40","doi-asserted-by":"publisher","first-page":"103","DOI":"10.1145\/1284621.1284627","volume":"50","author":"I Pollach","year":"2007","unstructured":"Pollach, I.: What\u2019s wrong with online privacy policies? Commun. ACM 50(9), 103\u2013108 (2007)","journal-title":"Commun. ACM"},{"key":"18_CR41","unstructured":"Proofpoint: Social media brand protection fraud (2017). https:\/\/www.proofpoint.com\/sites\/default\/files\/pfpt-en-social-media-protection-brand-fraud-report.pdf"},{"key":"18_CR42","unstructured":"Protenus: 2017 breach barometer annual report (2017). https:\/\/www.protenus.com\/2017-breach-barometer-annual-report"},{"key":"18_CR43","unstructured":"Rasthofer, S., Huber, S., Arzt, S.: All your family secrets belong to us - worrisome security issues in tracker apps. In: DEF CON 26 (2018)"},{"key":"18_CR44","unstructured":"Roesner, F., Kohno, T., Wetherall, D.: Detecting and defending against third-party tracking on the web. In: Presented as part of the 9th USENIX Symposium on Networked Systems Design and Implementation (NSDI), pp. 155\u2013168 (2012)"},{"key":"18_CR45","unstructured":"Schneier, B.: Doxing as an attack, January 2015. https:\/\/www.schneier.com\/blog\/archives\/2015\/01\/doxing_as_an_at.html"},{"key":"18_CR46","unstructured":"Secureworks Counter Threat Unit Threat Intelligence: Threat Group 4127 Targets Hillary Clinton Presidential Campaign, June 2016. https:\/\/www.secureworks.com\/research\/threat-group-4127-targets-hillary-clinton-presidential-campaign"},{"key":"18_CR47","unstructured":"Seymour, J., Aqil, A.: Your voice is my passport. In: DEF Con 26 (2018)"},{"key":"18_CR48","doi-asserted-by":"crossref","unstructured":"Snyder, P., Doerfler, P., Kanich, C., McCoy, D.: Fifteen minutes of unwanted fame: detecting and characterizing doxing. In: Internet Measurement Conference, IMC 2017, pp. 432\u2013444 (2017)","DOI":"10.1145\/3131365.3131385"},{"key":"18_CR49","unstructured":"New York Times: An old swindle revived, March 1898. https:\/\/www.nytimes.com\/1898\/03\/20\/archives\/an-old-swindle-revived-the-spanish-prisoner-and-buried-treasure.html"},{"key":"18_CR50","unstructured":"TrendLabs Security Intelligence: Operation Pawn Storm Ramps Up its Activities. Targets NATO, White House (2015)"},{"key":"18_CR51","unstructured":"Urban, T., Tatang, D., Degeling, M., Holz, T., Pohlmann, N.: The unwanted sharing economy: an analysis of cookie syncing and user transparency under GDPR. arXiv preprint arXiv:1811.08660 (2018)"},{"key":"18_CR52","unstructured":"Web Investigations: Investigation and Doxing Prices, July 2019. https:\/\/doxanybody.wordpress.com\/category\/investigation-and-doxing-prices\/"},{"issue":"4","key":"18_CR53","first-page":"297","volume":"5","author":"EO Yeboah-Boateng","year":"2014","unstructured":"Yeboah-Boateng, E.O., Amanor, P.M.: Phishing, smishing & vishing: an assessment of threats against mobile devices. J. Emerg. Trends Comput. Inf. Sci. 5(4), 297\u2013307 (2014)","journal-title":"J. Emerg. Trends Comput. Inf. Sci."}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2019"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-29962-0_18","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,15]],"date-time":"2024-09-15T00:14:02Z","timestamp":1726359242000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-29962-0_18"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030299613","9783030299620"],"references-count":53,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-29962-0_18","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"15 September 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Luxembourg","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Luxembourg","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 September 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 September 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/conf.laas.fr\/esorics\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"344","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"67","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3,2","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"11","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}