{"id":"https://openalex.org/W4308642196","doi":"https://doi.org/10.1145/3548606.3560641","title":"Cart-ology: Intercepting Targeted Advertising via Ad Network Identity Entanglement","display_name":"Cart-ology: Intercepting Targeted Advertising via Ad Network Identity Entanglement","publication_year":2022,"publication_date":"2022-11-07","ids":{"openalex":"https://openalex.org/W4308642196","doi":"https://doi.org/10.1145/3548606.3560641"},"language":"en","primary_location":{"id":"doi:10.1145/3548606.3560641","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3548606.3560641","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3548606.3560641","source":{"id":"https://openalex.org/S4363608815","display_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3548606.3560641","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027768748","display_name":"ChangSeok Oh","orcid":"https://orcid.org/0000-0002-3808-5412"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"ChangSeok Oh","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070578895","display_name":"Chris Kanich","orcid":"https://orcid.org/0000-0002-3836-2168"},"institutions":[{"id":"https://openalex.org/I39422238","display_name":"University of Illinois Chicago","ror":"https://ror.org/02mpq6x41","country_code":"US","type":"education","lineage":["https://openalex.org/I39422238"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chris Kanich","raw_affiliation_strings":["University of Illinois Chicago, Chicago, IL, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois Chicago, Chicago, IL, USA","institution_ids":["https://openalex.org/I39422238"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037313918","display_name":"Damon McCoy","orcid":"https://orcid.org/0000-0001-7386-7260"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Damon McCoy","raw_affiliation_strings":["NYU, New York, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NYU, New York, NY, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025054495","display_name":"Paul Pearce","orcid":"https://orcid.org/0000-0001-6418-9699"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Paul Pearce","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9038,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.8126781,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"2401","last_page":"2414"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12335","display_name":"Sexuality, Behavior, and Technology","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/3203","display_name":"Clinical Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7733027935028076},{"id":"https://openalex.org/keywords/identifier","display_name":"Identifier","score":0.750541090965271},{"id":"https://openalex.org/keywords/identity","display_name":"Identity (music)","score":0.7109560966491699},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.6463786959648132},{"id":"https://openalex.org/keywords/ephemeral-key","display_name":"Ephemeral key","score":0.643952488899231},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6288626790046692},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5908211469650269},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.4851030111312866},{"id":"https://openalex.org/keywords/targeted-advertising","display_name":"Targeted advertising","score":0.48496150970458984},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.4611203372478485},{"id":"https://openalex.org/keywords/identity-management","display_name":"Identity management","score":0.4188099503517151},{"id":"https://openalex.org/keywords/advertising","display_name":"Advertising","score":0.40147995948791504},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.33591246604919434},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.31395626068115234},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2482115924358368},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.12405341863632202}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7733027935028076},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.750541090965271},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.7109560966491699},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.6463786959648132},{"id":"https://openalex.org/C76947770","wikidata":"https://www.wikidata.org/wiki/Q4533181","display_name":"Ephemeral key","level":2,"score":0.643952488899231},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6288626790046692},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5908211469650269},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.4851030111312866},{"id":"https://openalex.org/C2777459780","wikidata":"https://www.wikidata.org/wiki/Q1628411","display_name":"Targeted advertising","level":2,"score":0.48496150970458984},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4611203372478485},{"id":"https://openalex.org/C555379026","wikidata":"https://www.wikidata.org/wiki/Q977772","display_name":"Identity management","level":3,"score":0.4188099503517151},{"id":"https://openalex.org/C112698675","wikidata":"https://www.wikidata.org/wiki/Q37038","display_name":"Advertising","level":1,"score":0.40147995948791504},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.33591246604919434},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.31395626068115234},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2482115924358368},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.12405341863632202},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C24890656","wikidata":"https://www.wikidata.org/wiki/Q82811","display_name":"Acoustics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3548606.3560641","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3548606.3560641","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3548606.3560641","source":{"id":"https://openalex.org/S4363608815","display_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3548606.3560641","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3548606.3560641","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3548606.3560641","source":{"id":"https://openalex.org/S4363608815","display_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3366692587","display_name":null,"funder_award_id":"N00014-18-1-2662","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8540916185","display_name":"Collaborative Research: SaTC: CORE: Medium: Methods and Tools for Effective, Auditable, and Interpretable Online Ad Transparency","funder_award_id":"2151837","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8876996369","display_name":null,"funder_award_id":"N00014","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4308642196.pdf","grobid_xml":"https://content.openalex.org/works/W4308642196.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W845431725","https://openalex.org/W1943882014","https://openalex.org/W2045645172","https://openalex.org/W2056201388","https://openalex.org/W2089465436","https://openalex.org/W2604173668","https://openalex.org/W2782867239","https://openalex.org/W2787932188","https://openalex.org/W2980960050","https://openalex.org/W3129741204","https://openalex.org/W3153735076","https://openalex.org/W3154732898","https://openalex.org/W3154807658","https://openalex.org/W4255976928"],"related_works":["https://openalex.org/W4254841053","https://openalex.org/W2997601332","https://openalex.org/W4253528273","https://openalex.org/W2032050747","https://openalex.org/W2507616274","https://openalex.org/W4210746918","https://openalex.org/W17155033","https://openalex.org/W2581328603","https://openalex.org/W1560287221","https://openalex.org/W2381093267"],"abstract_inverted_index":{"Targeted":[0],"advertising":[1,8],"is":[2],"a":[3,93],"pervasive":[4],"practice":[5],"in":[6,37],"the":[7,98,101],"ecosystem,":[9],"with":[10,53],"complex":[11],"representations":[12],"of":[13],"user":[14,43],"identity":[15,67],"central":[16],"to":[17,23,29,39,81,92,100],"targeting.":[18],"Ad":[19],"networks":[20,47],"are":[21],"incentivized":[22],"tie":[24],"ephemeral":[25],"cookies":[26],"across":[27],"devices":[28],"lasting":[30],"durable":[31,66],"identifiers":[32],"such":[33,61],"as":[34,62],"email":[35],"addresses":[36],"order":[38],"develop":[40],"comprehensive":[41],"cross-device":[42],"profiles.":[44],"Third-party":[45],"ad":[46,84,102],"typically":[48],"do":[49],"not":[50],"have":[51],"relationships":[52,80],"users":[54],"and":[55],"must":[56],"rely":[57],"on":[58],"external":[59],"parties":[60],"merchant":[63],"websites":[64],"for":[65],"information,":[68],"introducing":[69],"intricate":[70],"trust":[71,79],"relationships.":[72],"We":[73],"find":[74],"attackers":[75],"can":[76],"exploit":[77],"these":[78],"confuse":[82],"an":[83,88],"network":[85],"into":[86],"linking":[87],"unprivileged":[89],"attacker's":[90],"browser":[91],"victim's":[94],"identity,":[95],"thus":[96],"\"impersonating\"":[97],"victim":[99],"network.":[103]},"counts_by_year":[{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}