Private  Browsing  Mode  Protection

Platform – Incognito (Chrome Version 1.0)Private Browsing (Mozillna Version 3.5)Private Browsing(Safari Version 2.0)InPrivate Browsing(IE Version 8)

Features – Delete Cookies Clear History Clear Web CacheTrackers are still used

Proposed Web Extension (KEEPrivate)

Platform – Chrome (Version 47.0)Extension Cost – FreeFeatures – Open Private Browsing Mode

Third Party Cookie BlocksClear Session CookieClear HistoryBlacklistNotification of Trackers

Survey: User’s View of Private Mode

Survey Duration – 5 ½ WeeksSample Size – 45 (79% in 20-30)Expectation – Anonymous

Untraceable User-friendly UI No other tools needed Security Simple operation

Result:

Overview• What is Private Browsing Mode?A privacy feature in some web browsers to disable browsing history and the web cache. This allows a person to browse the Web without storing local data that could be retrieved at a later date.

• Problems in Private Browsing Mode:- it is used different from how it is marketed- complicated operation- users identity can be recognized

• Our Proposed Web Extension:- easy operation- customized blocking trackers- customized blacklist

Methods1. Research

• Compare and study private modes in different browsers2. Design and Conduct Survey

• Figure out user's understanding of private browsing mod• Survey questions: 10

3. Analysis the Mismatch• Results of survey shows user’s understanding is different from how

private browsing mode is marketed4. Design Web Extension UI

• Propose a web extension to solve the mismatch• Design the UI and features of proposed web extension

5. Implement Web Extension• Features: Blacklist, Clear history, Block trackers via cookie,

javascript6. Conduct Experiment

• Evaluate the effect of proposed web extension : KEEPrivate

New  Web  Extension  Aligning  User  Expectations  of  Private  Browsering Mode  with  Actual  Protection  

Xi Zheng and Lieyong ZouAdvised by: Prof. Limin Jia and Prof. Lujo Bauer

Evaluation:  Third-­party  Cookies  vs.  JavaScript

ConclusionsMismatch• There is huge mismatch between users’ understanding of private

browsing mode and how it is marketedContribution of KEEPrivate• Combine the benefits of Ghostery & Private Browsing Mode(Incognito)

• Benefits – Cost: Free Security: Customize Blocking Trackers & BlacklistPrivate: Clear History & Cookies

KEEPrivate Architecture

Anonymous in Private Browsing Mode?

Err…..Nor really, you will still be tracked!

We can can customize blocking trackers!

Contrast Expectation & Protection

Description – Identity can be recognizedSecurity IssueUsers can be tracedThrid party cookie existPrivacy IssueNeed other toolsComplex operations

1  Click  is  Okay!5  Steps  =  21  Clicks