24 research outputs found

    Poster Abstract: Efficient Browser Identification with JavaScript Engine Fingerprinting

    No full text
    For security and privacy on the Internet the webbrowser has become an important piece of software. Nowadays even mobil devices include a powerful browser, and in combination with cloud computing the webbrowser mimics more and more operating system functionality. For many use cases, legit server operators as well as attackers need to find out the exact version of a particular user's webbrowser. While the user agent string (which is currently used for that purpose) can be easily manipulated, certain aspects of the underlying software cannot. In our approach we will use the deviance of Javascript engine implementations to identify the browser accurately. This approach is efficient and has low computational overhead, and might be used to identify the version of the webbrowser regardless of the possibly manipulated user agent string

    Fast and Reliable Browser Identification with JavaScript Engine Fingerprinting

    No full text
    Web browsers are crucial software components in today's usage of the Internet, but the reliable detection of whether a client is using a specific browser can still be considered a nontrivial problem. Reliable browser identification is crucial for online security and privacy e.g., regarding drive-by downloads and user tracking, and can be used to enhance the user's security. So far the UserAgent string is often used to identify a given browser, but it is a self-reported string provided by the client and can be changed arbitrarily. In this paper we propose a new method for identifying web browsers based on the underlying Javascript engine, which can be executed on the client side within a fraction of a second. Our method is three orders of magnitude faster than previous work on Javascript engine fingerprinting, and can be implemented with well below a few hundred lines of code. We show the feasibility of our method with a survey and discuss the consequences for user privacy and browser security. Furthermore, we collected data for more than 150 browser and operating system combinations, and present algorithms to make browser identification as fast as possible. UserAgent string modifications become easily detectable with JavaScript engine fingerprinting, which is shown exemplarily on the Tor browser bundle as it uses a uniform UserAgent string across different browser versions. Finally, we propose to use our results for enhancing state-of-the-art session management (with or without SSL), as reliable browser identification can be used to increase the complexity of session hijacking attacks considerably

    Rotational Stability of Scaphoid Osteosyntheses: An In Vitro Comparison of Small Fragment Cannulated Screws to Novel Bone Screw Sets.

    No full text
    BACKGROUND:The current standard of care for operative repair of scaphoid fractures involves reduction and internal fixation with a single headless compression screw. However, a compression screw in isolation does not necessarily control rotational stability at a fracture or nonunion site. The single screw provides rotational control through friction and bone interdigitation from compression at the fracture site. We hypothesize that osteosyntheses with novel bone screw sets (BSS) equipped with anti-rotational elements provide improved rotational stability. METHODS:Stability of osteosynthesis under increasing cyclic torsional loading was investigated on osteotomized cadaveric scaphoids. Two novel prototype BSS, oblique type (BSS-obl.) and longitudinal type (BSS-long.) were compared to three conventional screws: Acutrak2®mini, HCS®3.0 and Twinfix®. Biomechanical tests were performed on scaphoids from single donors in paired comparison and analyzed by balanced incomplete random block design. Loading was increased by 50 mNm increments with 1,000 cycles per torque level and repeated until a rotational clearance of 10°. Primary outcome measure was the number of cycles to 10° clearance, secondary outcome measure was the maximum rotational clearance for each torque level. FINDINGS:BSS-obl. performed significantly better than Acutrak2®mini and HCS® (p = 0.015, p<0.0001). BSS-long. performed significantly better than HCS® (p = 0.010). No significant difference in performance between BSS-obl. and BSS-long. (p = 0.361), between BSS obl. and Twinfix® (p = 0.50) and BSS long. and Twinfix® (p = 0.667) was detected. Within the torque range up to 200 mNm, four of 21 (19%) BSS-long. and four of 21 (19%) BSS-obl. preparations showed early failure. The same loading led to early failure in four (29%) Twinfix®, seven (50%) Acutrak2®mini and 10 (71%) HCS® of 14 screw samples, respectively. CONCLUSIONS:For both BSS and to a lesser extent for Twinfix® (as dual-component screw), higher rotational stabilities were identified in comparison to single component headless compression screws
    corecore