{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,21]],"date-time":"2025-11-21T18:06:15Z","timestamp":1763748375937,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":45,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,5,24]],"date-time":"2021-05-24T00:00:00Z","timestamp":1621814400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,5,24]]},"DOI":"10.1145\/3433210.3437524","type":"proceedings-article","created":{"date-parts":[[2021,6,4]],"date-time":"2021-06-04T15:26:39Z","timestamp":1622820399000},"page":"123-134","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["Oversharing Is Not Caring: How CNAME Cloaking Can Expose Your Session Cookies"],"prefix":"10.1145","author":[{"given":"Assel","family":"Aliyeva","sequence":"first","affiliation":[{"name":"Boston University, Boston, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Manuel","family":"Egele","sequence":"additional","affiliation":[{"name":"Boston University, Boston, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,6,4]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"[n.d.]. AdBlock. https:\/\/getadblock.com\/block-ads-and-popups.  [n.d.]. AdBlock. https:\/\/getadblock.com\/block-ads-and-popups."},{"key":"e_1_3_2_1_2_1","unstructured":"[n.d.]. Alexa Top Sites. http:\/\/s3.amazonaws.com\/alexa-static\/top-1m.csv.zip.  [n.d.]. Alexa Top Sites. http:\/\/s3.amazonaws.com\/alexa-static\/top-1m.csv.zip."},{"key":"e_1_3_2_1_3_1","unstructured":"[n.d.]. CNAME Cloaking the dangerous disguise of third-party trackers. https:\/\/shorturl.at\/biqEF.  [n.d.]. CNAME Cloaking the dangerous disguise of third-party trackers. https:\/\/shorturl.at\/biqEF."},{"key":"e_1_3_2_1_4_1","unstructured":"[n.d.]. Common MIME types. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Basics_of_HTTP\/MIME_types\/Common_types.  [n.d.]. Common MIME types. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Basics_of_HTTP\/MIME_types\/Common_types."},{"key":"e_1_3_2_1_5_1","unstructured":"[n.d.]. Cookiepedia. https:\/\/cookiepedia.co.uk.  [n.d.]. Cookiepedia. https:\/\/cookiepedia.co.uk."},{"key":"e_1_3_2_1_6_1","unstructured":"[n.d.].Easy Privacy.  [n.d.].Easy Privacy."},{"key":"e_1_3_2_1_7_1","unstructured":"[n.d.]. EasyList. https:\/\/easylist.to.  [n.d.]. EasyList. https:\/\/easylist.to."},{"key":"e_1_3_2_1_8_1","unstructured":"[n.d.]. Ghostery. https:\/\/www.ghostery.com.  [n.d.]. Ghostery. https:\/\/www.ghostery.com."},{"key":"e_1_3_2_1_9_1","unstructured":"[n.d.]. Github. https:\/\/github.com\/notracking\/hosts-blocklists.  [n.d.]. Github. https:\/\/github.com\/notracking\/hosts-blocklists."},{"volume-title":"Global Digital Population as of","year":"2020","key":"e_1_3_2_1_10_1","unstructured":"[n.d.]. Global Digital Population as of July 2020 . https:\/\/www.statista.com\/statistics\/617136\/digital-population-worldwide\/. [n.d.]. Global Digital Population as of July 2020. https:\/\/www.statista.com\/statistics\/617136\/digital-population-worldwide\/."},{"key":"e_1_3_2_1_11_1","unstructured":"[n.d.]. Internet 2010 in numbers. https:\/\/www.pingdom.com\/blog\/internet-2010-in-numbers\/.  [n.d.]. Internet 2010 in numbers. https:\/\/www.pingdom.com\/blog\/internet-2010-in-numbers\/."},{"key":"e_1_3_2_1_12_1","unstructured":"[n.d.]. Majestic Million. https:\/\/majestic.com\/reports\/majestic-million.  [n.d.]. Majestic Million. https:\/\/majestic.com\/reports\/majestic-million."},{"key":"e_1_3_2_1_13_1","unstructured":"[n.d.]. MitmProxy. https:\/\/github.com\/mitmproxy.  [n.d.]. MitmProxy. https:\/\/github.com\/mitmproxy."},{"key":"e_1_3_2_1_14_1","unstructured":"[n.d.]. PC Magazine ENCYCLOPEDIA. https:\/\/www.pcmag.com\/encyclopedia\/term\/naked-domain.  [n.d.]. PC Magazine ENCYCLOPEDIA. https:\/\/www.pcmag.com\/encyclopedia\/term\/naked-domain."},{"key":"e_1_3_2_1_15_1","unstructured":"[n.d.]. RabbitMQ. https:\/\/www.rabbitmq.com.  [n.d.]. RabbitMQ. https:\/\/www.rabbitmq.com."},{"key":"e_1_3_2_1_16_1","unstructured":"[n.d.]. Recursive Feature Elimination. https:\/\/www.scikit-yb.org\/en\/latest\/api\/model_selection\/rfecv.html.  [n.d.]. Recursive Feature Elimination. https:\/\/www.scikit-yb.org\/en\/latest\/api\/model_selection\/rfecv.html."},{"key":"e_1_3_2_1_17_1","unstructured":"[n.d.]. Scapy. https:\/\/scapy.net.  [n.d.]. Scapy. https:\/\/scapy.net."},{"key":"e_1_3_2_1_18_1","unstructured":"[n.d.]. Scikit Learn. https:\/\/scikit-learn.org.  [n.d.]. Scikit Learn. https:\/\/scikit-learn.org."},{"key":"e_1_3_2_1_19_1","unstructured":"[n.d.]. Search the web from the address bar. https:\/\/rb.gy\/9ccb6a.  [n.d.]. Search the web from the address bar. https:\/\/rb.gy\/9ccb6a."},{"key":"e_1_3_2_1_20_1","unstructured":"[n.d.]. Selenium webdriver. https:\/\/www.selenium.dev\/projects\/.  [n.d.]. Selenium webdriver. https:\/\/www.selenium.dev\/projects\/."},{"key":"e_1_3_2_1_21_1","unstructured":"[n.d.]. Session Management Cheat Sheet. https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/Session_Management_Cheat_Sheet.html.  [n.d.]. Session Management Cheat Sheet. https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/Session_Management_Cheat_Sheet.html."},{"key":"e_1_3_2_1_22_1","unstructured":"[n.d.]. Tcpdump. https:\/\/www.tcpdump.org.  [n.d.]. Tcpdump. https:\/\/www.tcpdump.org."},{"key":"e_1_3_2_1_23_1","unstructured":"[n.d.]. uBlock Origin. https:\/\/github.com\/gorhill\/uBlock.  [n.d.]. uBlock Origin. https:\/\/github.com\/gorhill\/uBlock."},{"key":"e_1_3_2_1_24_1","unstructured":"[n.d.]. Virus Total. https:\/\/www.virustotal.com\/gui\/home\/upload.  [n.d.]. Virus Total. https:\/\/www.virustotal.com\/gui\/home\/upload."},{"volume-title":"Proceedings of the 2006 ACM SIGCOMM Conference on Internet Measurement(IMC'06)","author":"Krishnamurthy B.","key":"e_1_3_2_1_25_1","unstructured":"B. Krishnamurthy and C. Wills . 2006. Generating a Privacy Footprint on the Inter-net . In Proceedings of the 2006 ACM SIGCOMM Conference on Internet Measurement(IMC'06) . 65--70. https:\/\/doi.org\/10.1145\/1177080.1177088 B. Krishnamurthy and C. Wills. 2006. Generating a Privacy Footprint on the Inter-net. In Proceedings of the 2006 ACM SIGCOMM Conference on Internet Measurement(IMC'06). 65--70. https:\/\/doi.org\/10.1145\/1177080.1177088"},{"volume-title":"Proceedings of the 2009 ACM workshop on Online social networks. 112--117","author":"Krishnamurthy B.","key":"e_1_3_2_1_26_1","unstructured":"B. Krishnamurthy and C. Wills . 2009. On the Leakage of Personally Identifiable Information Via Online Social Networks . In Proceedings of the 2009 ACM workshop on Online social networks. 112--117 . B. Krishnamurthy and C. Wills. 2009. On the Leakage of Personally Identifiable Information Via Online Social Networks. In Proceedings of the 2009 ACM workshop on Online social networks. 112--117."},{"volume-title":"Proceedings of the 18th International Conference on World Wide Web","author":"Krishnamurthy B.","key":"e_1_3_2_1_27_1","unstructured":"B. Krishnamurthy and C. Wills . 2009. Privacy Diffusion on the Web: A Longitudinal Perspective . In Proceedings of the 18th International Conference on World Wide Web ( Madrid, Spain)(WWW'09). 541--550. https:\/\/doi.org\/10.1145\/1526709.1526782 B. Krishnamurthy and C. Wills. 2009. Privacy Diffusion on the Web: A Longitudinal Perspective. In Proceedings of the 18th International Conference on World Wide Web(Madrid, Spain)(WWW'09). 541--550. https:\/\/doi.org\/10.1145\/1526709.1526782"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"crossref","unstructured":"F. Cozza A. Guarino F. Isernia D. Malandrino A. Rapuano R. Schiavone and R. Zaccagnino. 2020. Hybrid and lightweight detection of third party tracking:Design implementation and evaluation. Computer Networks 167 (2020). https:\/\/doi.org\/10.1016\/j.comnet.2019.106993  F. Cozza A. Guarino F. Isernia D. Malandrino A. Rapuano R. Schiavone and R. Zaccagnino. 2020. Hybrid and lightweight detection of third party tracking:Design implementation and evaluation. Computer Networks 167 (2020). https:\/\/doi.org\/10.1016\/j.comnet.2019.106993","DOI":"10.1016\/j.comnet.2019.106993"},{"key":"e_1_3_2_1_29_1","volume-title":"What Ad Blockers Are (and Are Not) Doing. In 2016 Fourth IEEE Workshop on Hot Topics in Web Systems and Technologies(HotWeb'16)","author":"Wills C.","year":"2016","unstructured":"C. Wills and D. Uzunoglu . 2016 . What Ad Blockers Are (and Are Not) Doing. In 2016 Fourth IEEE Workshop on Hot Topics in Web Systems and Technologies(HotWeb'16) . 72--77. https:\/\/doi.org\/10.1109\/HotWeb. 2016 .21 C. Wills and D. Uzunoglu. 2016. What Ad Blockers Are (and Are Not) Doing. In 2016 Fourth IEEE Workshop on Hot Topics in Web Systems and Technologies(HotWeb'16). 72--77. https:\/\/doi.org\/10.1109\/HotWeb.2016.21"},{"key":"e_1_3_2_1_30_1","unstructured":"H. Dao J. Mazel and K. Fukuda. 2020. Characterizing CNAME Cloaking-Based Tracking on the Web.IEEE\/IFIP TMA'20(2020) 1--9.  H. Dao J. Mazel and K. Fukuda. 2020. Characterizing CNAME Cloaking-Based Tracking on the Web.IEEE\/IFIP TMA'20(2020) 1--9."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.26"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2016.0143"},{"key":"e_1_3_2_1_33_1","volume-title":"Proceedings on Privacy Enhancing Technologies 2020","author":"Fouad I.","year":"2020","unstructured":"I. Fouad , N. Bielova , A. Legout , and N. Sarafijanovic-Djukic . 2020 . Proceedings on Privacy Enhancing Technologies 2020 , 2 ( 2020 ), 499--518. I. Fouad, N. Bielova, A.Legout, and N. Sarafijanovic-Djukic. 2020. Proceedings on Privacy Enhancing Technologies 2020, 2 (2020), 499--518."},{"volume-title":"Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security (Asia CCS'19). 340--351","author":"Sanchez-Rola I.","key":"e_1_3_2_1_34_1","unstructured":"I. Sanchez-Rola , M. Dell'Amico , P. Kotzias , D. Balzarotti , L. Bilge , P. Vervier , and I. Santos . 2019. Can I Opt Out Yet? GDPR and the Global Illusion of Cookie Control . In Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security (Asia CCS'19). 340--351 . I. Sanchez-Rola, M. Dell'Amico, P. Kotzias, D. Balzarotti, L. Bilge, P. Vervier, and I. Santos. 2019. Can I Opt Out Yet? GDPR and the Global Illusion of Cookie Control. In Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security (Asia CCS'19). 340--351."},{"key":"e_1_3_2_1_35_1","unstructured":"J.Schuh. [n.d.]. Building a more private web: A path towards making third party cookies obsolete. https:\/\/blog.chromium.org\/2020\/01\/building-more-private-web-path-towards.html.  J.Schuh. [n.d.]. Building a more private web: A path towards making third party cookies obsolete. https:\/\/blog.chromium.org\/2020\/01\/building-more-private-web-path-towards.html."},{"key":"e_1_3_2_1_36_1","unstructured":"J. Wilander. [n.d.]. Full Third-Party Cookie Blocking and More. https:\/\/webkit.org\/blog\/10218\/full-third-party-cookie-blocking-and-more\/.  J. Wilander. [n.d.]. Full Third-Party Cookie Blocking and More. https:\/\/webkit.org\/blog\/10218\/full-third-party-cookie-blocking-and-more\/."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00044"},{"volume-title":"Today's Firefox Blocks Third-Party Tracking Cookies and Cryptomining by Default. https:\/\/shorturl.at\/rzD35","author":"Wood M.","key":"e_1_3_2_1_38_1","unstructured":"M. Wood . [n.d.]. Today's Firefox Blocks Third-Party Tracking Cookies and Cryptomining by Default. https:\/\/shorturl.at\/rzD35 . M. Wood. [n.d.]. Today's Firefox Blocks Third-Party Tracking Cookies and Cryptomining by Default. https:\/\/shorturl.at\/rzD35."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"crossref","unstructured":"P. Chen N. Nikiforakis C. Huygens and L. Desmet. 2015. A Dangerous Mix: Large-Scale Analysis of Mixed-Content Websites. In Information Security. 354--363.  P. Chen N. Nikiforakis C. Huygens and L. Desmet. 2015. A Dangerous Mix: Large-Scale Analysis of Mixed-Content Websites. In Information Security. 354--363.","DOI":"10.1007\/978-3-319-27659-5_25"},{"volume-title":"Proceedings of the Internet Measurement Conference 2018 (IMC'18)","author":"Scheitle Q.","key":"e_1_3_2_1_40_1","unstructured":"Q. Scheitle , O. Hohlfeld , J. Gamba , J. Jelten , T. Zimmermann , S.D. Strowes , and N. Vallina-Rodriguez . 2018. A Long Way to the Top: Significance, Structure,and Stability of Internet Top Lists . In Proceedings of the Internet Measurement Conference 2018 (IMC'18) . 478--493. https:\/\/doi.org\/10.1145\/3278532.3278574 Q.Scheitle, O.Hohlfeld, J.Gamba, J.Jelten, T. Zimmermann, S.D. Strowes, and N. Vallina-Rodriguez. 2018. A Long Way to the Top: Significance, Structure,and Stability of Internet Top Lists. In Proceedings of the Internet Measurement Conference 2018 (IMC'18). 478--493. https:\/\/doi.org\/10.1145\/3278532.3278574"},{"volume-title":"Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS '16)","author":"Englehardt S.","key":"e_1_3_2_1_41_1","unstructured":"S. Englehardt and A. Narayanan . 2016. Online Tracking: A 1-Million-Site Measurement and Analysis . In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS '16) . 1388--1401. https:\/\/doi.org\/10.1145\/2976749.2978313 S. Englehardt and A. Narayanan. 2016. Online Tracking: A 1-Million-Site Measurement and Analysis. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS '16). 1388--1401. https:\/\/doi.org\/10.1145\/2976749.2978313"},{"volume-title":"Proceedings of the 24th International Conference on World Wide Web (WWW'15)","author":"Englehardt S.","key":"e_1_3_2_1_42_1","unstructured":"S. Englehardt , D. Reisman , C. Eubank , P. Zimmerman , J. Mayer , A. Narayanan , and E.W. Felten . 2015. Cookies That Give You Away: The Surveillance Implications of Web Tracking . In Proceedings of the 24th International Conference on World Wide Web (WWW'15) . 289--299. https:\/\/doi.org\/10.1145\/2736277.2741679 S. Englehardt, D. Reisman, C. Eubank, P.Zimmerman, J.Mayer, A. Narayanan, and E.W. Felten. 2015. Cookies That Give You Away: The Surveillance Implications of Web Tracking. In Proceedings of the 24th International Conference on World Wide Web (WWW'15). 289--299. https:\/\/doi.org\/10.1145\/2736277.2741679"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.49"},{"volume-title":"International Conference on Passive and Active Network Measurement. 277--289","author":"Li T.","key":"e_1_3_2_1_44_1","unstructured":"T. Li , H. Hang , M. Faloutsos , and P. Efstathopoulos . 2015. Track Advisor: Taking Back Browsing Privacy from Third-Party Trackers . In International Conference on Passive and Active Network Measurement. 277--289 . T. Li, H. Hang, M. Faloutsos, and P. Efstathopoulos. 2015. Track Advisor: Taking Back Browsing Privacy from Third-Party Trackers. In International Conference on Passive and Active Network Measurement. 277--289."},{"key":"e_1_3_2_1_45_1","unstructured":"T. Libert. 2015. Exposing the hidden web: An analysis of third-party HTTP requests on 1 million websites. (2015). arXiv:1511.00619 [cs.CR].  T. Libert. 2015. Exposing the hidden web: An analysis of third-party HTTP requests on 1 million websites. (2015). arXiv:1511.00619 [cs.CR]."}],"event":{"name":"ASIA CCS '21: ACM Asia Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Virtual Event Hong Kong","acronym":"ASIA CCS '21"},"container-title":["Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3433210.3437524","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3433210.3437524","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:48:11Z","timestamp":1750193291000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3433210.3437524"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,5,24]]},"references-count":45,"alternative-id":["10.1145\/3433210.3437524","10.1145\/3433210"],"URL":"https:\/\/doi.org\/10.1145\/3433210.3437524","relation":{},"subject":[],"published":{"date-parts":[[2021,5,24]]},"assertion":[{"value":"2021-06-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}