{"id":"https://openalex.org/W4412373329","doi":"https://doi.org/10.56553/popets-2025-0155","title":"Tracking Without Borders: Studying the Role of WebViews in Bridging Mobile and Web Tracking","display_name":"Tracking Without Borders: Studying the Role of WebViews in Bridging Mobile and Web Tracking","publication_year":2025,"publication_date":"2025-07-13","ids":{"openalex":"https://openalex.org/W4412373329","doi":"https://doi.org/10.56553/popets-2025-0155"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2025-0155","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0155","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.56553/popets-2025-0155","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090315089","display_name":"Nipuna Weerasekara","orcid":"https://orcid.org/0000-0002-6129-5071"},"institutions":[{"id":"https://openalex.org/I2802499160","display_name":"IMDEA Networks","ror":"https://ror.org/04mm9fg30","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I2802499160"]},{"id":"https://openalex.org/I50357001","display_name":"Universidad Carlos III de Madrid","ror":"https://ror.org/03ths8210","country_code":"ES","type":"education","lineage":["https://openalex.org/I50357001"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Nipuna Weerasekara","raw_affiliation_strings":["IMDEA Networks Institute / Universidad Carlos III de Madrid"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IMDEA Networks Institute / Universidad Carlos III de Madrid","institution_ids":["https://openalex.org/I2802499160","https://openalex.org/I50357001"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010599198","display_name":"Jos\u00e9 Miguel Moreno","orcid":"https://orcid.org/0009-0009-0849-204X"},"institutions":[{"id":"https://openalex.org/I50357001","display_name":"Universidad Carlos III de Madrid","ror":"https://ror.org/03ths8210","country_code":"ES","type":"education","lineage":["https://openalex.org/I50357001"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Jos\u00e9 Miguel Moreno","raw_affiliation_strings":["Universidad Carlos III de Madrid"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad Carlos III de Madrid","institution_ids":["https://openalex.org/I50357001"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079790457","display_name":"Srdjan Matic","orcid":"https://orcid.org/0000-0003-2822-3970"},"institutions":[{"id":"https://openalex.org/I4210162154","display_name":"IMDEA Software Institute","ror":"https://ror.org/04xvfkh51","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I4210162154"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Srdjan Matic","raw_affiliation_strings":["IMDEA Software Institute"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IMDEA Software Institute","institution_ids":["https://openalex.org/I4210162154"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059746228","display_name":"Joel Reardon","orcid":"https://orcid.org/0000-0001-9702-775X"},"institutions":[{"id":"https://openalex.org/I168635309","display_name":"University of Calgary","ror":"https://ror.org/03yjb2x39","country_code":"CA","type":"education","lineage":["https://openalex.org/I168635309"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Joel Reardon","raw_affiliation_strings":["University of Calgary / AppCensus"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Calgary / AppCensus","institution_ids":["https://openalex.org/I168635309"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070199150","display_name":"Juan Tapiador","orcid":"https://orcid.org/0000-0002-4573-3967"},"institutions":[{"id":"https://openalex.org/I50357001","display_name":"Universidad Carlos III de Madrid","ror":"https://ror.org/03ths8210","country_code":"ES","type":"education","lineage":["https://openalex.org/I50357001"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Juan Tapiador","raw_affiliation_strings":["Universidad Carlos III de Madrid"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad Carlos III de Madrid","institution_ids":["https://openalex.org/I50357001"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016569835","display_name":"Narseo Vallina-Rodr\u00edguez","orcid":"https://orcid.org/0000-0002-5420-6835"},"institutions":[{"id":"https://openalex.org/I2802499160","display_name":"IMDEA Networks","ror":"https://ror.org/04mm9fg30","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I2802499160"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Narseo Vallina-Rodr\u00edguez","raw_affiliation_strings":["IMDEA Networks Institute / AppCensus"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IMDEA Networks Institute / AppCensus","institution_ids":["https://openalex.org/I2802499160"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.23082985,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2025","issue":"4","first_page":"745","last_page":"762"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12799","display_name":"Mobile and Web Applications","score":0.961899995803833,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12799","display_name":"Mobile and Web Applications","score":0.961899995803833,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10609","display_name":"Digital Marketing and Social Media","score":0.9613999724388123,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12863","display_name":"Web and Library Services","score":0.9276999831199646,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/bridging","display_name":"Bridging (networking)","score":0.8956526517868042},{"id":"https://openalex.org/keywords/tracking","display_name":"Tracking (education)","score":0.6911236643791199},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5248249173164368},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3528975248336792},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.14477568864822388},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.12931162118911743}],"concepts":[{"id":"https://openalex.org/C174348530","wikidata":"https://www.wikidata.org/wiki/Q188635","display_name":"Bridging (networking)","level":2,"score":0.8956526517868042},{"id":"https://openalex.org/C2775936607","wikidata":"https://www.wikidata.org/wiki/Q466845","display_name":"Tracking (education)","level":2,"score":0.6911236643791199},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5248249173164368},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3528975248336792},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.14477568864822388},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.12931162118911743},{"id":"https://openalex.org/C19417346","wikidata":"https://www.wikidata.org/wiki/Q7922","display_name":"Pedagogy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.56553/popets-2025-0155","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0155","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.56553/popets-2025-0155","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0155","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4408719353","https://openalex.org/W4388870064","https://openalex.org/W2210139803","https://openalex.org/W4235186151","https://openalex.org/W2054685365","https://openalex.org/W2056057048","https://openalex.org/W2667588871"],"abstract_inverted_index":{"WebViews":[0,110,150,169],"are":[1],"a":[2,14,38,125],"core":[3],"component":[4],"of":[5,60,72,91,135,183],"today's":[6],"in-app":[7],"browsing":[8],"technologies":[9],"on":[10],"mobile":[11,22,33],"platforms,":[12],"playing":[13],"central":[15],"role":[16],"in":[17,94,151],"rendering":[18],"web":[19,31],"content":[20],"like":[21],"advertisements.":[23],"However,":[24],"their":[25,61],"use":[26],"and":[27,32,57,63,76,102,117,132,138,148,181,187,197],"potential":[28],"to":[29,68,111,170,191],"bridge":[30],"tracking":[34,107,120,173],"paradigms":[35],"comes":[36],"at":[37],"significant":[39],"privacy":[40,49,58,115,147],"cost":[41],"for":[42,203],"users.":[43],"Although":[44],"prior":[45],"work":[46],"has":[47],"highlighted":[48],"risks":[50],"associated":[51],"with":[52],"WebViews,":[53],"the":[54,69,86,152,184],"real-world":[55],"scale":[56],"impact":[59],"misuse":[62,182],"abuse":[64,93],"remain":[65],"unexplored":[66],"due":[67],"hybrid":[70],"nature":[71],"WebViews-combining":[73],"Java,":[74],"native,":[75],"dynamically-loaded":[77],"JavaScript":[78,122,158,189],"(JS)":[79],"code.":[80,123],"In":[81],"this":[82],"paper,":[83],"we":[84,140],"present":[85],"first":[87],"large-scale":[88],"empirical":[89],"study":[90],"WebView":[92],"Android":[95],"apps.":[96],"We":[97,154],"analyze":[98],"how":[99,142],"app":[100],"developers":[101],"third-party":[103],"SDKs":[104],"facilitate":[105],"user":[106,195,201],"by":[108],"configuring":[109],"bypass":[112],"default":[113],"platform":[114],"protections":[116],"enable":[118],"invasive":[119],"through":[121],"Using":[124],"novel":[126],"analysis":[127,134],"pipeline":[128],"that":[129,156],"combines":[130],"static":[131],"dynamic":[133],"Java/Kotlin":[136],"code":[137],"JavaScript,":[139],"reveal":[141],"numerous":[143],"actors":[144],"undermine":[145],"users'":[146],"exploit":[149],"wild.":[153],"show":[155],"harmful":[157],"code,":[159],"often":[160],"distributed":[161],"via":[162],"unvetted":[163],"Real-Time":[164],"Bidding":[165],"(RTB)":[166],"processes,":[167],"exploits":[168],"perform":[171],"advanced":[172],"techniques":[174],"such":[175],"as":[176],"cookie":[177],"sync-ing,":[178],"canvas":[179],"fingerprinting,":[180],"Java-JS":[185],"interface":[186],"permission-protected":[188],"APIs":[190],"silently":[192],"leak":[193],"unique":[194],"identifiers":[196],"geolocation":[198],"data":[199],"without":[200],"awareness":[202],"cross-platform":[204],"tracking.":[205]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}