BrFAST: a Tool to Select Browser Fingerprinting Attributes for Web Authentication According to a Usability-Security Trade-off

Nampoina Andriamilanto (1) , Tristan Allard (1, 2)

1 DRUID - Declarative & Reliable management of Uncertain, user-generated Interlinked Data
2 SPICY - Security & PrIvaCY

In this demonstration, we put ourselves in the place of a website manager who seeks to use browser fingerprinting for web authentication. The first step is to choose the attributes to implement among the hundreds that are available. To do so, we developed BrFAST, an attribute selection platform that includes FPSelect, an algorithm that rigorously selects the attributes according to a tradeoff between security and usability. BrFAST is configured with a set of parameters for which we provide values for BrFAST to be usable as is. We notably include the resources to use two publicly available browser fingerprint datasets. BrFAST can be extended to use other parameters: other attribute selection methods, other measures of security and usability, or other fingerprint datasets. BrFAST helps visualize the exploration of the possibilities during the search of the best attribute set to use, evaluate the properties of attribute sets, and compare several attribute selection methods. During the demonstration, we compare the attribute sets selected by FPSelect with those selected by the usual methods according to the properties of the resulting browser fingerprints (e.g., their usability, their unicity).

Domaines: Web; Cryptographie et sécurité [cs.CR]

Nampoina Andriamilanto, Tristan Allard. BrFAST: a Tool to Select Browser Fingerprinting Attributes for Web Authentication According to a Usability-Security Trade-off. Companion Proceedings of the Web Conference 2021 (WWW ’21 Companion), Apr 2021, Ljubljana, Slovenia. ⟨10.1145/3442442.3458610⟩. ⟨hal-03202788⟩