{"id":"https://openalex.org/W7161547116","doi":"https://doi.org/10.48550/arxiv.2605.15962","title":"PersonaFingerprint: Measuring Persona Inference on Modern Websites with LLM-Driven Browsing","display_name":"PersonaFingerprint: Measuring Persona Inference on Modern Websites with LLM-Driven Browsing","publication_year":2026,"publication_date":"2026-05-15","ids":{"openalex":"https://openalex.org/W7161547116","doi":"https://doi.org/10.48550/arxiv.2605.15962"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.15962","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15962","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.15962","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082335373","display_name":"Chuxu Song","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Song, Chuxu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136356596","display_name":"Hao Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Hao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136440045","display_name":"Richard Martin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Martin, Richard","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T14074","display_name":"Persona Design and Applications","score":0.511900007724762,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T14074","display_name":"Persona Design and Applications","score":0.511900007724762,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.05620000138878822,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.04430000111460686,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/persona","display_name":"Persona","score":0.9563000202178955},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.7558000087738037},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6283000111579895},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5270000100135803},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.40950000286102295},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.3594000041484833}],"concepts":[{"id":"https://openalex.org/C313442","wikidata":"https://www.wikidata.org/wiki/Q778556","display_name":"Persona","level":2,"score":0.9563000202178955},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.7558000087738037},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6402000188827515},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6283000111579895},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.6148999929428101},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5270000100135803},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.40950000286102295},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3671000003814697},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.361299991607666},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.3594000041484833},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3425999879837036},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.32330000400543213},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.29510000348091125},{"id":"https://openalex.org/C11192451","wikidata":"https://www.wikidata.org/wiki/Q2032038","display_name":"Stylometry","level":2,"score":0.2800999879837036},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.27570000290870667},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.27320000529289246},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.26420000195503235},{"id":"https://openalex.org/C13743948","wikidata":"https://www.wikidata.org/wiki/Q45842","display_name":"Web crawler","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.25920000672340393}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.15962","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15962","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.15962","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15962","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.4795689284801483,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Website":[0],"Fingerprinting":[1],"(WFP)":[2],"has":[3],"traditionally":[4],"focused":[5],"on":[6,133,161],"inferring":[7],"which":[8,171],"website":[9],"a":[10,30,42,70,137,173],"user":[11,174],"visits":[12],"from":[13],"encrypted":[14,80,164],"traffic":[15,81,165],"metadata":[16,166],"such":[17],"as":[18],"packet":[19],"sizes":[20],"and":[21,28,48,77,90,93,109,120,181],"timing.":[22],"In":[23],"this":[24,53],"paper,":[25],"we":[26,57],"identify":[27],"quantify":[29],"new":[31],"privacy":[32],"risk":[33,54],"in":[34,102],"modern":[35,118,162],"web":[36],"settings:":[37],"an":[38,59,124],"adversary":[39],"can":[40,110,141,167],"infer":[41],"user's":[43],"persona":[44,67,85,97,127,143],"using":[45],"only":[46,170],"packet-length":[47],"inter-arrival-time":[49],"sequences.":[50],"To":[51],"study":[52],"at":[55,113],"scale,":[56],"build":[58],"LLM-driven":[60],"multi-agent":[61],"browsing":[62],"framework":[63],"that":[64],"enforces":[65],"controllable":[66],"constraints":[68],"while":[69,148],"computer-use":[71],"agent":[72],"interacts":[73],"with":[74],"real":[75],"websites":[76,119],"collects":[78],"corresponding":[79],"traces.":[82],"We":[83],"formalize":[84],"fingerprinting":[86],"under":[87],"both":[88],"closed-set":[89],"open-world":[91,125],"settings":[92],"further":[94],"evaluate":[95],"whether":[96],"information":[98],"is":[99,183],"already":[100],"embedded":[101],"representations":[103],"learned":[104],"by":[105],"existing":[106],"WFP":[107],"models":[108],"be":[111],"amplified":[112],"low":[114],"cost.":[115],"Across":[116],"10":[117],"15":[121],"personas":[122],"(plus":[123],"class),":[126],"inference":[128],"achieves":[129],"about":[130],"84%":[131],"accuracy":[132,144],"mixed-site":[134],"traffic;":[135],"moreover,":[136],"lightweight":[138],"multi-task":[139],"objective":[140],"boost":[142],"to":[145],"around":[146],"80%":[147],"retaining":[149],"strong":[150],"site":[151,172],"classification":[152],"performance":[153],"(about":[154],"93%":[155],"baseline).":[156],"Our":[157],"results":[158],"show":[159],"that,":[160],"websites,":[163],"leak":[168],"not":[169],"visits,":[175],"but":[176],"also":[177],"how":[178],"they":[179],"browse":[180],"who":[182],"browsing.":[184]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-19T00:00:00"}