Abstract
In targeted (or behavioral) advertising, users’ behaviors are tracked over time in order to customize served ads to their interests. This creates serious privacy concerns since for the purpose of profiling, private information is collected and centralized by a limited number of companies. Despite claims that this information is secure, there is a potential for this information to be leaked through the customized services these companies are offering. In this paper, we show that targeted ads expose users’ private data not only to ad providers but also to any entity that has access to users’ ads. We propose a methodology to filter targeted ads and infer users’ interests from them. We show that an adversary that has access to only a small number of websites containing Google ads can infer users’ interests with an accuracy of more than 79% (Precision) and reconstruct as much as 58% of a Google Ads profile in general (Recall). This paper is, to our knowledge, the first work that identifies and quantifies information leakage through ads served in targeted advertising.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Do Not Track (2011), http://donottrack.us/
Google AdSense Help (2011), https://www.google.com/adsense/support/bin/answer.py?hl=en&answer=10528
Google Adwords Placement Tool (2011), http://adwords.google.com/support/aw/bin/answer.py?hl=en&answer=179238/
Google Display Network (2011), http://www.google.com/ads/displaynetwork/
Google Privacy Policy (2011), http://www.google.com/intl/en/policies/privacy/
Network Advertising Initiative (2011), http://www.networkadvertising.org/
Tracking Protection Lists (2011), http://www.privacyonline.org.uk/
Google Ads Preferences (2012), http://www.google.com/ads/preferences/
Personalized Advertising from Microsoft (2012), http://choice.live.com/AdvertisementChoice/Default.aspx
Yahoo! Ad Interest Manager (2012), http://info.yahoo.com/privacy/us/yahoo/opt_out/targeting/
Castelluccia, C., De Cristofaro, E., Perito, D.: Private Information Disclosure from Web Searches. In: Atallah, M.J., Hopper, N.J. (eds.) PETS 2010. LNCS, vol. 6205, pp. 38–55. Springer, Heidelberg (2010)
Doctorow, C.: Scroogled (2007), http://blogoscoped.com/archive/2007-09-17-n72.html
Guha, S., Cheng, B., Francis, P.: Challenges in measuring online advertising systems. In: Internet Measurement (2010)
Guha, S., Cheng, B., Francis, P.: Privad: Practical privacy in online advertising. In: NSDI (2011)
Korolova, A.: Privacy violations using microtargeted ads: A case study. In: ICDM Workshops (2010)
Toubiana, V., Narayanan, A., Boneh, D., Nissenbaum, H., Barocas, S.: Adnostic: Privacy preserving targeted advertising. In: NDSS (2010)
Valentino-Devries, J.: What they know about you. The Wall Street Journal (July 31, 2010)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2012 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Castelluccia, C., Kaafar, MA., Tran, MD. (2012). Betrayed by Your Ads!. In: Fischer-Hübner, S., Wright, M. (eds) Privacy Enhancing Technologies. PETS 2012. Lecture Notes in Computer Science, vol 7384. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-31680-7_1
Download citation
DOI: https://doi.org/10.1007/978-3-642-31680-7_1
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-31679-1
Online ISBN: 978-3-642-31680-7
eBook Packages: Computer ScienceComputer Science (R0)