An experimental platform for gathering user behavioural data via browser APIs
This provides a tool for researchers to investigate privacy threats from user behavioral data, but it is incremental as it builds on existing discussions and methods.
The paper tackles the problem of user privacy threats from browser APIs by developing an experimental platform to gather behavioral data, consisting of a Chrome extension for data collection and server software for storage.
Websites are capable of learning a wide range of information about the platform on which a browser is executing. One major source of such information is the set of standardised Application Programming Interfaces (APIs) provided within the browser, which can be accessed by JavaScript downloaded by a website; this information can then either be used by the JavaScript or sent back to the originating site. As has been widely discussed, much of this information can threaten user privacy. The main purpose of this paper is to document a publicly available platform designed to enable further investigation of one class of such threats, namely those based on analysing user behavioural data. The platform has two main components: a Chrome extension that gathers user keystroke and mouse data via browser APIs, and server software that collects and stores this data for subsequent experimentation.