170 citations · 414 across the 11 of their papers we have counts for
13 papers
Beyond Epsilon: A Principled QIF Framework for Local Differential Privacy
Ramon G. Gonze, Natasha Fernandes, Heber H. Arcolezi +2
Local Differential Privacy (LDP) has become the de facto standard for privacy-preserving data collection in large-scale systems, in particular for the purpose of estimating frequen…
An Ontology of Dark Patterns Knowledge: Foundations, Definitions, and a Pathway for Shared Knowledge-Building
Colin M. Gray, Cristiana Santos, Nataliia Bielova +1
Deceptive and coercive design practices are increasingly used by companies to extract profit, harvest data, and limit consumer choice. Dark patterns represent the most common conte…
Did I delete my cookies? Cookies respawning with browser fingerprinting
Imane Fouad, Cristiana Santos, Arnaud Legout +1
Stateful and stateless web tracking gathered much attention in the last decade, however they were always measured separately. To the best of our knowledge, our study is the first t…
Consent Management Platforms under the GDPR: processors and/or controllers?
Cristiana Santos, Midas Nouwens, Michael Toth +2
Consent Management Providers (CMPs) provide consent pop-ups that are embedded in ever more websites over time to enable streamlined compliance with the legal requirements for conse…
Dark Patterns and the Legal Requirements of Consent Banners: An Interaction Criticism Perspective
Colin M. Gray, Cristiana Santos, Nataliia Bielova +2
User engagement with data privacy and security through consent banners has become a ubiquitous part of interacting with internet services. While previous work has addressed consent…
DESIRE: A Third Way for a European Exposure Notification System Leveraging the best of centralized and decentralized systems
Claude Castelluccia, Nataliia Bielova, Antoine Boutet +4
This document presents an evolution of the ROBERT protocol that decentralizes most of its operations on the mobile devices. DESIRE is based on the same architecture than ROBERT but…
Are cookie banners indeed compliant with the law? Deciphering EU legal requirements on consent and technical means to verify compliance of cookie banners
Cristiana Santos, Nataliia Bielova, Célestin Matte
In this work, we analyze the legal requirements on how cookie banners are supposed to be implemented to be fully compliant with the e-Privacy Directive and the General Data Protect…
Do Cookie Banners Respect my Choice? Measuring Legal Compliance of Banners from IAB Europe's Transparency and Consent Framework
Célestin Matte, Nataliia Bielova, Cristiana Santos
As a result of the GDPR and the ePrivacy Directive, European users encounter cookie banners on almost every website. Many of such banners are implemented by Consent Management Prov…
Browser Fingerprinting: A survey
Pierre Laperdrix, Nataliia Bielova, Benoit Baudry +1
With this paper, we survey the research performed in the domain of browser fingerprinting, while providing an accessible entry point to newcomers in the field. We explain how this…
Missed by Filter Lists: Detecting Unknown Third-Party Trackers with Invisible Pixels
Imane Fouad, Nataliia Bielova, Arnaud Legout +1
Web tracking has been extensively studied over the last decade. To detect tracking, previous studies and user tools rely on filter lists. However, it has been shown that filter lis…
To Extend or not to Extend: on the Uniqueness of Browser Extensions and Web Logins
Gabor Gyorgy Gulyas, Doliere Francis Some, Nataliia Bielova +1
Recent works showed that websites can detect browser extensions that users install and websites they are logged into. This poses significant privacy risks, since extensions and Web…
Control What You Include! Server-Side Protection against Third Party Web Tracking
Dolière Francis Somé, Nataliia Bielova, Tamara Rezk
Third party tracking is the practice by which third parties recognize users accross different websites as they browse the web. Recent studies show that 90% of websites contain thir…
On the Content Security Policy Violations due to the Same-Origin Policy
Dolière Francis Somé, Nataliia Bielova, Tamara Rezk
Modern browsers implement different security policies such as the Content Security Policy (CSP), a mechanism designed to mitigate popular web vulnerabilities, and the Same Origin P…