{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T05:01:25Z","timestamp":1755838885019,"version":"3.40.3"},"publisher-location":"Cham","reference-count":46,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030350543"},{"type":"electronic","value":"9783030350550"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-35055-0_12","type":"book-chapter","created":{"date-parts":[[2019,11,12]],"date-time":"2019-11-12T19:05:21Z","timestamp":1573585521000},"page":"188-203","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Even Turing Should Sometimes Not Be Able to Tell: Mimicking Humanoid Usage Behavior for Exploratory Studies of Online Services"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7917-6065","authenticated-orcid":false,"given":"Stephan","family":"Wiefling","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7360-8314","authenticated-orcid":false,"given":"Nils","family":"Gruschka","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7863-0622","authenticated-orcid":false,"given":"Luigi","family":"Lo Iacono","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,11,13]]},"reference":[{"key":"12_CR1","unstructured":"Akamai: Bot-Manager, January 2018. \nhttps:\/\/www.akamai.com\/us\/en\/multimedia\/documents\/product-brief\/bot-manager-product-brief.pdf"},{"key":"12_CR2","unstructured":"Allen, N.A.: Risk based authentication. Patent number US9202038B1 (2015)"},{"key":"12_CR3","unstructured":"Amazon: Amazon.co.uk Help: How do I request my data? (2019). \nhttps:\/\/www.amazon.co.uk\/gp\/help\/customer\/display.html?nodeId=G5NBVNN2RHXD5BUW"},{"key":"12_CR4","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"722","DOI":"10.1007\/978-3-540-76298-0_52","volume-title":"The Semantic Web","author":"S Auer","year":"2007","unstructured":"Auer, S., Bizer, C., Kobilarov, G., Lehmann, J., Cyganiak, R., Ives, Z.: DBpedia: a nucleus for a web of open data. In: Aberer, K., et al. (eds.) ASWC\/ISWC 2007. LNCS, vol. 4825, pp. 722\u2013735. Springer, Heidelberg (2007). \nhttps:\/\/doi.org\/10.1007\/978-3-540-76298-0_52"},{"key":"12_CR5","unstructured":"Blythe, J., et al.: Testing cyber security with simulated humans. In: IAAI 2011, San Francisco, CA, USA, August 2011"},{"issue":"7415","key":"12_CR6","doi-asserted-by":"publisher","first-page":"295","DOI":"10.1038\/nature11421","volume":"489","author":"RM Bond","year":"2012","unstructured":"Bond, R.M., et al.: A 61-million-person experiment in social influence and political mobilization. Nature 489(7415), 295\u2013298 (2012)","journal-title":"Nature"},{"issue":"8","key":"12_CR7","doi-asserted-by":"publisher","first-page":"1476","DOI":"10.1109\/JPROC.2016.2637878","volume":"105","author":"T Bujlow","year":"2017","unstructured":"Bujlow, T., Carela-Espanol, V., Lee, B.R., Barlet-Ros, P.: A survey on web tracking: mechanisms, implications, and defenses. Proc. IEEE 105(8), 1476\u20131510 (2017)","journal-title":"Proc. IEEE"},{"issue":"7","key":"12_CR8","doi-asserted-by":"publisher","first-page":"396","DOI":"10.1145\/358886.358895","volume":"23","author":"SK Card","year":"1980","unstructured":"Card, S.K., Moran, T.P., Newell, A.: The keystroke-level model for user performance time with interactive systems. Commun. ACM 23(7), 396\u2013410 (1980)","journal-title":"Commun. ACM"},{"key":"12_CR9","doi-asserted-by":"crossref","unstructured":"Chaabane, A., Kaafar, M.A., Boreli, R.: Big friend is watching you: analyzing online social networks tracking capabilities. In: WOSN 2012, Helsinki, Finland, pp. 7\u201312. ACM, August 2012","DOI":"10.1145\/2342549.2342552"},{"key":"12_CR10","unstructured":"Choudhary, S.R., Prasad, M.R., Alessandro Orso: X-PERT: a web application testing tool for cross-browser inconsistency detection. In: ISSTA 2014, San Jose, CA, USA, pp. 417\u2013420. ACM (2014)"},{"key":"12_CR11","series-title":"Communications in Computer and Information Science","doi-asserted-by":"publisher","first-page":"123","DOI":"10.1007\/978-3-642-22786-8_15","volume-title":"Computer Networks and Intelligent Computing","author":"AK Dalai","year":"2011","unstructured":"Dalai, A.K., Jena, S.K.: Online identification of illegitimate web server requests. In: Venugopal, K.R., Patnaik, L.M. (eds.) ICIP 2011. CCIS, vol. 157, pp. 123\u2013131. Springer, Heidelberg (2011). \nhttps:\/\/doi.org\/10.1007\/978-3-642-22786-8_15"},{"key":"12_CR12","doi-asserted-by":"crossref","unstructured":"Degeling, M., Utz, C., Lentzsch, C., Hosseini, H., Schaub, F., Holz, T.: We value your privacy ... Now take some cookies: measuring the GDPR\u2019s impact on web privacy. In: NDSS 2019, San Diego, CA, USA, February 2019","DOI":"10.14722\/ndss.2019.23378"},{"key":"12_CR13","unstructured":"DETER Project: DASH user guide (2014). \nhttps:\/\/deter-project.org\/sites\/deter-test.isi.edu\/files\/files\/dash_users_guide.pdf"},{"issue":"2","key":"12_CR14","doi-asserted-by":"publisher","first-page":"129","DOI":"10.1080\/00140139208967802","volume":"35","author":"CG Drury","year":"1992","unstructured":"Drury, C.G., Hoffmann, E.R.: A model for movement time on data-entry keyboards. Ergonomics 35(2), 129\u2013147 (1992)","journal-title":"Ergonomics"},{"key":"12_CR15","doi-asserted-by":"crossref","unstructured":"Englehardt, S., Narayanan, A.: Online tracking: a 1-million-site measurement and analysis. In: CCS 2016, Vienna, Austria, pp. 1388\u20131401. ACM, October 2016","DOI":"10.1145\/2976749.2978313"},{"key":"12_CR16","unstructured":"European Parliament and Council: Regulation (EU) 2016\/679 (GDPR), January 2016. \nhttp:\/\/data.europa.eu\/eli\/reg\/2016\/679\/oj\/eng"},{"key":"12_CR17","unstructured":"Franken, G., Goethem, T.V., Joosen, W.: Who left open the cookie jar? A comprehensive evaluation of third-party cookie policies. In: USENIX Security 2018, Baltimore, MD, USA, August 2018"},{"key":"12_CR18","doi-asserted-by":"crossref","unstructured":"Freeman, D., Jain, S., Duermuth, M., Biggio, B., Giacinto, G.: Who are you? A statistical approach to measuring user authenticity. In: NDSS 2016, San Diego, CA, USA, February 2016","DOI":"10.14722\/ndss.2016.23240"},{"key":"12_CR19","doi-asserted-by":"crossref","unstructured":"Golla, M., D\u00fcrmuth, M.: On the accuracy of password strength meters. In: CCS 2018, Toronto, Canada, pp. 1567\u20131582. ACM, October 2018","DOI":"10.1145\/3243734.3243769"},{"key":"12_CR20","unstructured":"Google: reCAPTCHA v3, July 2019. \nhttps:\/\/developers.google.com\/recaptcha\/docs\/v3"},{"key":"12_CR21","unstructured":"Google Chrome: Puppeteer - Headless Chrome node API, July 2019. \nhttps:\/\/github.com\/googlechrome\/puppeteer"},{"key":"12_CR22","unstructured":"Grassi, P.A., et al.: Digital identity guidelines: authentication and lifecycle management. Technical report, NIST SP 800\u201363b, National Institute of Standards and Technology, Gaithersburg, MD, June 2017"},{"key":"12_CR23","unstructured":"Iaroshevych, O.: Improving second factor authentication challenges to help protect Facebook account owners. In: SOUPS 2017, Santa Clara, CA, USA. USENIX Association, July 2017"},{"issue":"4","key":"12_CR24","doi-asserted-by":"publisher","first-page":"1564","DOI":"10.1016\/j.compedu.2010.06.022","volume":"55","author":"T Judd","year":"2010","unstructured":"Judd, T., Kennedy, G.: A five-year study of on-campus Internet use by undergraduate biomedical students. Comput. Educ. 55(4), 1564\u20131571 (2010)","journal-title":"Comput. Educ."},{"key":"12_CR25","doi-asserted-by":"crossref","unstructured":"Komandur, S., Johnson, P.W., Storch, R.: Relation between mouse button click duration and muscle contraction time. In: EMBC 2008. IEEE, August 2008","DOI":"10.1109\/IEMBS.2008.4649657"},{"key":"12_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"277","DOI":"10.1007\/978-3-319-15509-8_21","volume-title":"Passive and Active Measurement","author":"T-C Li","year":"2015","unstructured":"Li, T.-C., Hang, H., Faloutsos, M., Efstathopoulos, P.: TrackAdvisor: taking back browsing privacy from third-party trackers. In: Mirkovic, J., Liu, Y. (eds.) PAM 2015. LNCS, vol. 8995, pp. 277\u2013289. Springer, Cham (2015). \nhttps:\/\/doi.org\/10.1007\/978-3-319-15509-8_21"},{"key":"12_CR27","doi-asserted-by":"crossref","unstructured":"Mark, G., Wang, Y., Niiya, M.: Stress and multitasking in everyday college life: an empirical study of online activity. In: CHI 2014, Toronto, Canada. ACM (2014)","DOI":"10.1145\/2556288.2557361"},{"key":"12_CR28","unstructured":"Milka, G.: Anatomy of account takeover. In: Enigma 2018, Santa Clara, CA. USENIX Association, January 2018. \nhttps:\/\/www.usenix.org\/node\/208154"},{"key":"12_CR29","doi-asserted-by":"crossref","unstructured":"Petsas, T., Tsirantonakis, G., Athanasopoulos, E., Ioannidis, S.: Two-factor authentication: is the world ready?: quantifying 2FA adoption. In: EuroSec 2015, Bordeaux, France, pp. 4:1\u20134:7. ACM, April 2015","DOI":"10.1145\/2751323.2751327"},{"key":"12_CR30","unstructured":"Rsmwe: Rakuten.com Chrome Headless Detection, February 2018. \nhttps:\/\/github.com\/Rsmwe\/Headless-detected-demo"},{"issue":"3","key":"12_CR31","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1109\/MIC.2017.72","volume":"21","author":"B Smith","year":"2017","unstructured":"Smith, B., Linden, G.: Two decades of recommender systems at Amazon.com. IEEE Internet Comput. 21(3), 12\u201318 (2017)","journal-title":"IEEE Internet Comput."},{"key":"12_CR32","first-page":"12","volume":"12","author":"P Snickars","year":"2018","unstructured":"Snickars, P., M\u00e4hler, R.: SpotiBot - turing testing spotify. Digit. Hum. Q. 12, 12 (2018)","journal-title":"Digit. Hum. Q."},{"issue":"6","key":"12_CR33","doi-asserted-by":"publisher","first-page":"751","DOI":"10.1016\/j.ijhcs.2004.09.001","volume":"61","author":"RW Soukoreff","year":"2004","unstructured":"Soukoreff, R.W., MacKenzie, I.S.: Towards a standard for pointing device evaluation, perspectives on 27 years of Fitts\u2019 law research in HCI. Int. J. Hum. Comput. Stud. 61(6), 751\u2013789 (2004)","journal-title":"Int. J. Hum. Comput. Stud."},{"key":"12_CR34","doi-asserted-by":"crossref","unstructured":"Starov, O., Nikiforakis, N.: XHOUND: quantifying the fingerprintability of browser extensions. In: IEEE S&P, San Jose, CA, USA. IEEE, May 2017","DOI":"10.1109\/SP.2017.18"},{"key":"12_CR35","unstructured":"Steward, S., Burns, D.: WebDriver - W3C Recommendation, June 2018. \nhttps:\/\/www.w3.org\/TR\/webdriver1\/"},{"key":"12_CR36","doi-asserted-by":"publisher","first-page":"1587","DOI":"10.1016\/j.procs.2018.08.132","volume":"126","author":"P Sulikowski","year":"2018","unstructured":"Sulikowski, P., Zdziebko, T., Turzy\u0144ski, D., Ka\u0144toch, E.: Human-website interaction monitoring in recommender systems. Procedia Comput. Sci. 126, 1587\u20131596 (2018)","journal-title":"Procedia Comput. Sci."},{"issue":"9","key":"12_CR37","doi-asserted-by":"publisher","first-page":"5452","DOI":"10.1167\/iovs.11-8284","volume":"53","author":"S Trauzettel-Klosinski","year":"2012","unstructured":"Trauzettel-Klosinski, S., Dietz, K.: Standardized assessment of reading performance: the new international reading speed texts IReST. Investig. Opthalmol. Vis. Sci. 53(9), 5452 (2012)","journal-title":"Investig. Opthalmol. Vis. Sci."},{"key":"12_CR38","unstructured":"UK Financial Conduct Authority: Regulatory Sandbox Lessons Learned Report (2017). \nhttps:\/\/www.fca.org.uk\/publication\/research-and-data\/regulatory-sandbox-lessons-learned-report.pdf"},{"key":"12_CR39","unstructured":"UK Information Commissioner\u2019s Office: Call for Views on Building a Sandbox: Summary of Responses and ICO Comment (2018). \nhttps:\/\/ico.org.uk\/media\/about-the-ico\/consultations\/2260322\/201811-sandbox-call-for-views-analysis.pdf"},{"key":"12_CR40","unstructured":"Vastel, A.: Detecting Chrome headless, new techniques, January 2018. \nhttps:\/\/antoinevastel.com\/bot%20detection\/2018\/01\/17\/detect-chrome-headless-v2.html"},{"key":"12_CR41","unstructured":"Vastel, A.: How to monitor the execution of JavaScript code with Puppeteer and Chrome headless, June 2019. \nhttps:\/\/antoinevastel.com\/javascript\/2019\/06\/10\/monitor-js-execution.html"},{"key":"12_CR42","doi-asserted-by":"crossref","unstructured":"Velayathan, G., Yamada, S.: Behavior-based web page evaluation. In: WI-IAT 2006, pp. 409\u2013412, December 2006","DOI":"10.1109\/WI-IATW.2006.51"},{"issue":"1","key":"12_CR43","doi-asserted-by":"publisher","first-page":"227","DOI":"10.2478\/popets-2019-0013","volume":"2019","author":"Giridhari Venkatadri","year":"2019","unstructured":"Venkatadri, G., Lucherini, E., Sapiezynski, P., Mislove, A.: Investigating sources of PII used in Facebook\u2019s targeted advertising. In: PETS 2019, pp. 227\u2013244 (2019)","journal-title":"Proceedings on Privacy Enhancing Technologies"},{"key":"12_CR44","unstructured":"W3Schools: Browser Statistics: The Most Popular Browsers (2019). \nhttps:\/\/www.w3schools.com\/browsers\/default.asp"},{"key":"12_CR45","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"134","DOI":"10.1007\/978-3-030-22312-0_10","volume-title":"ICT Systems Security and Privacy Protection","author":"S Wiefling","year":"2019","unstructured":"Wiefling, S., Lo Iacono, L., D\u00fcrmuth, M.: Is this really you? An empirical study on risk-based authentication applied in the wild. In: Dhillon, G., Karlsson, F., Hedstr\u00f6m, K., Z\u00faquete, A. (eds.) SEC 2019. IFIPAICT, vol. 562, pp. 134\u2013148. Springer, Cham (2019). \nhttps:\/\/doi.org\/10.1007\/978-3-030-22312-0_10"},{"issue":"2","key":"12_CR46","doi-asserted-by":"publisher","first-page":"87","DOI":"10.1002\/pits.20527","volume":"48","author":"JL Williams","year":"2011","unstructured":"Williams, J.L., Skinner, C.H., Floyd, R.G., Hale, A.D., Neddenriep, C., Kirk, E.P.: Words correct per minute: the variance in standardized reading scores accounted for by reading speed. Psychol. Sch. 48(2), 87\u2013101 (2011)","journal-title":"Psychol. Sch."}],"container-title":["Lecture Notes in Computer Science","Secure IT Systems"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-35055-0_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,12,4]],"date-time":"2019-12-04T06:05:44Z","timestamp":1575439544000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-35055-0_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030350543","9783030350550"],"references-count":46,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-35055-0_12","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"13 November 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"NordSec","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Nordic Conference on Secure IT Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Aalborg","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Denmark","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 November 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 November 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"nordsec2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/nordsec2019.cs.aau.dk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"32","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"17","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"53% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.9","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}