{"id":"https://openalex.org/W3015762016","doi":"https://doi.org/10.1109/sp40000.2020.00077","title":"Meddling Middlemen: Empirical Analysis of the Risks of Data-Saving Mobile Browsers","display_name":"Meddling Middlemen: Empirical Analysis of the Risks of Data-Saving Mobile Browsers","publication_year":2020,"publication_date":"2020-05-01","ids":{"openalex":"https://openalex.org/W3015762016","doi":"https://doi.org/10.1109/sp40000.2020.00077","mag":"3015762016"},"language":"en","primary_location":{"id":"doi:10.1109/sp40000.2020.00077","is_oa":true,"landing_page_url":"https://doi.org/10.1109/sp40000.2020.00077","pdf_url":"https://ieeexplore.ieee.org/ielx7/9144328/9152199/09152644.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/9144328/9152199/09152644.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026628469","display_name":"Brian Kondracki","orcid":null},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Brian Kondracki","raw_affiliation_strings":["Stony Brook University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103886720","display_name":"Assel Aliyeva","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Assel Aliyeva","raw_affiliation_strings":["Boston University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Boston University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044975798","display_name":"Manuel Egele","orcid":"https://orcid.org/0000-0001-5038-2682"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Manuel Egele","raw_affiliation_strings":["Boston University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Boston University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018209439","display_name":"Jason Polakis","orcid":"https://orcid.org/0000-0001-5034-0730"},"institutions":[{"id":"https://openalex.org/I39422238","display_name":"University of Illinois Chicago","ror":"https://ror.org/02mpq6x41","country_code":"US","type":"education","lineage":["https://openalex.org/I39422238"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jason Polakis","raw_affiliation_strings":["University of Illinois at Chicago"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois at Chicago","institution_ids":["https://openalex.org/I39422238"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5014031812","display_name":"Nick Nikiforakis","orcid":"https://orcid.org/0000-0002-9366-357X"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nick Nikiforakis","raw_affiliation_strings":["Stony Brook University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University","institution_ids":["https://openalex.org/I59553526"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"810","last_page":"824"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7508385181427002},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6798146367073059},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5239332318305969},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5011332035064697},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.4951869547367096},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4846833050251007},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.45969998836517334},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.33106547594070435},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1380811333656311}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7508385181427002},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6798146367073059},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5239332318305969},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5011332035064697},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.4951869547367096},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4846833050251007},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.45969998836517334},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.33106547594070435},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1380811333656311}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/sp40000.2020.00077","is_oa":true,"landing_page_url":"https://doi.org/10.1109/sp40000.2020.00077","pdf_url":"https://ieeexplore.ieee.org/ielx7/9144328/9152199/09152644.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},{"id":"pmh:oai:smartech.gatech.edu:1853/63722","is_oa":false,"landing_page_url":"http://hdl.handle.net/1853/63722","pdf_url":null,"source":{"id":"https://openalex.org/S4377196313","display_name":"SMARTech Repository (Georgia Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I130701444","host_organization_name":"Georgia Institute of Technology","host_organization_lineage":["https://openalex.org/I130701444"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Moving Image"}],"best_oa_location":{"id":"doi:10.1109/sp40000.2020.00077","is_oa":true,"landing_page_url":"https://doi.org/10.1109/sp40000.2020.00077","pdf_url":"https://ieeexplore.ieee.org/ielx7/9144328/9152199/09152644.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.6399999856948853,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G1627045951","display_name":"TWC: Small: Emerging Attacks Against the Mobile Web and Novel Proxy Technologies for Their Containment","funder_award_id":"1617593","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G2980348971","display_name":"SaTC: CORE: Small: Black-Box Flaw Discovery in Web Authentication and Authorization Mechanisms","funder_award_id":"1934597","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4504108201","display_name":null,"funder_award_id":"N00014-17-1","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G5906328765","display_name":null,"funder_award_id":"N00014-19-1-2364","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G7305008997","display_name":null,"funder_award_id":"CNS-1813974","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8438048380","display_name":"SaTC: CORE: Small: Understanding, Measuring, and Defending against Malicious Web Crawlers","funder_award_id":"1813974","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G886360076","display_name":null,"funder_award_id":"CNS-1617593","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8876996369","display_name":null,"funder_award_id":"N00014","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3015762016.pdf","grobid_xml":"https://content.openalex.org/works/W3015762016.grobid-xml"},"referenced_works_count":38,"referenced_works":["https://openalex.org/W149551663","https://openalex.org/W1509636246","https://openalex.org/W1603565383","https://openalex.org/W1820393415","https://openalex.org/W1968181699","https://openalex.org/W2001637908","https://openalex.org/W2002727242","https://openalex.org/W2114398364","https://openalex.org/W2128551894","https://openalex.org/W2158620655","https://openalex.org/W2189153846","https://openalex.org/W2380581874","https://openalex.org/W2505895234","https://openalex.org/W2509745758","https://openalex.org/W2551244268","https://openalex.org/W2551436658","https://openalex.org/W2552004720","https://openalex.org/W2612070316","https://openalex.org/W2612544399","https://openalex.org/W2613430740","https://openalex.org/W2733681384","https://openalex.org/W2751619797","https://openalex.org/W2763340581","https://openalex.org/W2767115056","https://openalex.org/W2788031314","https://openalex.org/W2792108956","https://openalex.org/W2793272611","https://openalex.org/W2805984568","https://openalex.org/W2890419535","https://openalex.org/W2891928976","https://openalex.org/W2912892598","https://openalex.org/W2931478288","https://openalex.org/W2947108274","https://openalex.org/W2948008293","https://openalex.org/W6630551101","https://openalex.org/W6677217071","https://openalex.org/W6679151981","https://openalex.org/W6740744476"],"related_works":["https://openalex.org/W2092530219","https://openalex.org/W2388464034","https://openalex.org/W2533125852","https://openalex.org/W2140460949","https://openalex.org/W2105580438","https://openalex.org/W2057435755","https://openalex.org/W3121798572","https://openalex.org/W2018782216","https://openalex.org/W2101552690","https://openalex.org/W2770877918"],"abstract_inverted_index":{"Mobile":[0],"browsers":[1,118],"have":[2],"become":[3,27],"one":[4],"of":[5,9,62,79,91,123,168,179,181,191,220],"the":[6,63,76,89,92,124,138,197,221],"main":[7],"mediators":[8],"our":[10,145],"online":[11],"activities.":[12],"However,":[13],"as":[14,194],"web":[15],"pages":[16],"continue":[17],"to":[18,72,154,165],"increase":[19],"in":[20,116,120,137,211],"size":[21],"and":[22,65,98,101,186,215],"streaming":[23],"media":[24],"on-the-go":[25],"has":[26],"commonplace,":[28],"mobile":[29,52],"data":[30,150],"plan":[31],"constraints":[32],"remain":[33],"a":[34,40,46,51,59,188],"significant":[35,121],"concern":[36],"for":[37],"users.":[38,73],"As":[39],"result,":[41],"data-saving":[42,69,81,114,206],"features":[43],"can":[44,200],"be":[45,201,218],"differentiating":[47],"factor":[48],"when":[49],"selecting":[50],"browser.":[53],"In":[54,143],"this":[55],"paper,":[56],"we":[57,203],"present":[58,136],"comprehensive":[60],"exploration":[61],"security":[64,126,182],"privacy":[66],"threat":[67],"that":[68,112,132,148,205,225],"functionality":[70,115,207],"presents":[71,208],"We":[74],"conduct":[75],"first":[77],"analysis":[78],"Android's":[80],"browser":[82,139],"(DSB)":[83],"ecosystem":[84],"across":[85],"multiple":[86],"dimensions,":[87],"including":[88],"characteristics":[90],"various":[93],"browsers'":[94],"infrastructure,":[95],"their":[96,102],"application":[97],"protocol-level":[99],"behavior,":[100],"effect":[103],"on":[104],"users'":[105],"browsing":[106],"experience.":[107],"Our":[108],"research":[109],"unequivocally":[110],"demonstrates":[111],"enabling":[113,149],"major":[117],"results":[119],"degradation":[122],"user's":[125],"posture":[127],"by":[128],"introducing":[129],"severe":[130],"vulnerabilities":[131],"are":[133],"not":[134],"otherwise":[135],"during":[140],"normal":[141],"operation.":[142],"summary,":[144],"experiments":[146],"show":[147],"savings":[151],"exposes":[152],"users":[153,216],"(i)":[155],"proxy":[156],"servers":[157],"running":[158],"outdated":[159],"software,":[160],"(ii)":[161],"man-in-the-middle":[162],"attacks":[163],"due":[164],"problematic":[166],"validation":[167],"TLS":[169,173],"certificates,":[170],"(iii)":[171],"weakened":[172],"cipher":[174],"suite":[175],"selection,":[176],"(iv)":[177],"lack":[178],"support":[180],"headers":[183],"like":[184],"HSTS,":[185],"(v)":[187],"higher":[189],"likelihood":[190],"being":[192],"labelled":[193],"bots.":[195],"While":[196],"discovered":[198],"issues":[199],"addressed,":[202],"argue":[204],"inherent":[209],"risks":[210],"an":[212],"increasingly-encrypted":[213],"Web,":[214],"should":[217],"alerted":[219],"critical":[222],"savings-vs-security":[223],"trade-off":[224],"they":[226,231],"implicitly":[227],"accept":[228],"every":[229],"time":[230],"enable":[232],"such":[233],"functionality.":[234]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}