The Future of Ad Blocking: An Analytical Framework and New Techniques
This work addresses the ad blocking problem for web users and publishers, offering incremental improvements through novel methods and a comprehensive framework.
The authors tackled the ad blocking arms race by modeling it as a state space and proposing new techniques, such as rootkit-inspired methods, which they implemented to successfully block ads and evade detection. They evaluated these techniques systematically and challenged the assumption of indefinite escalation, offering insights into the likely end game based on technical and legal factors.
We present a systematic study of ad blocking - and the associated "arms race" - as a security problem. We model ad blocking as a state space with four states and six state transitions, which correspond to techniques that can be deployed by either publishers or ad blockers. We argue that this is a complete model of the system. We propose several new ad blocking techniques, including ones that borrow ideas from rootkits to prevent detection by anti-ad blocking scripts. Another technique uses the insight that ads must be recognizable by humans to comply with laws and industry self-regulation. We have built prototype implementations of three of these techniques, successfully blocking ads and evading detection. We systematically evaluate our proposed techniques, along with existing ones, in terms of security, practicality, and legality. We characterize the order of growth of the development effort required to create/maintain ad blockers as a function of the growth of the web. Based on our state-space model, our new techniques, and this systematization, we offer insights into the likely "end game" of the arms race. We challenge the widespread assumption that the arms race will escalate indefinitely, and instead identify a combination of evolving technical and legal factors that will determine the outcome.