Transcript Document

Brent Chapman
Tera Corbari
Matt Devers
The views expressed in this presentation
are those of the authors and do not
reflect the official policy or position of
the United States Military Academy, the
Department of the Army, the
Department of Defense or the U.S.
Government.


Benefits/Legitimacy
Privacy Concerns
1
Log
Entry
1
Log
Entry
1
Log
Entry
1
Log
Entry
4 Log
Entries
adserver.com


Primary means of 3rd parties reaching the
end user
advertising
 affiliate networks

the usual suspects
 (doubleclick, google)

actively encouraged






Objects (Maps, Flash
player, etc.)
Images
Videos
Scripts
Style Sheets
iFrames
<EMBED>……</EMBED>
http://aruljohn.com/details.php



Technique used to increase effectiveness of
advertising campaigns
Group Profiling
 How an advertiser can turn your IP address
into your digital identity
You are no longer anonymous
Urchin.js
“By referring to javascript that’s hosted
elsewhere, you’re basically at the mercy
of that other organization…to not do evil
with it”
-David Campbell, security expert
“If I wanted a backdoor into the website,
this would be one of the best ways to do
it.”
AdBlock Plus







2o7.net
armytimes.com
gcion.com
mavenapps.net
militarytimes.com
theplatform.com
googleanalytics.com
Packet Level
•
•
•
•
•
•
•
•
208.79.X.X
2o7.net
akamai.net
gbahn.net
gcion.com
militarytimes.com
webtrends.akadns.net
www-googleanalytics.l.google.com

Visit top 25 Alexa sites
Use AdBlock Plus to construct a dataset of
external objects

Dataset available

1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.
22.
23.
24.
25.
Google
Yahoo
MySpace
YouTube
Facebook
Windows Live
MSN
Ebay
Wikipedia
AOL
Amazon
Craigslist
Blogger
Go
CNN
Photobucket
Microsoft
ESPN
Comcast
Flickr
Ask
Weather.com
IMDB
WordPress
New York Times

Use available plug-ins and services
 AdBlock Plus
 NoScript
 Tor
 Privoxy

Explore legal protections
 Claim with Federal Trade Commission




This talk covered what we can see. What
happens out of channel or above the user
level?
How can we visualize this better?
How can we organize this better?
Are there more advanced techniques out
there?
Brent Chapman
Tera Corbari
Matt Devers