# FP-Rainbow: Fingerprint-Based Browser Configuration Identification

Maxime Huyghe, Walter Rudametkin, Clément Quinton

► To cite this version:

Maxime Huyghe, Walter Rudametkin, Clément Quinton. FP-Rainbow: Fingerprint-Based Browser Configuration Identification. WWW'25 - International World Wide Web Conference, Apr 2025, Sydney, Australia. pp.1-1, 2025. hal-05029828

HAL Id: hal-05029828

https://hal.science/hal-05029828v1

Submitted on 10 Apr 2025

HAL is a multi-disciplinary open access
archive for the deposit and dissemination of sci-
entific research documents, whether they are pub-
lished or not. The documents may come from
teaching and research institutions in France or
abroad, or from public or private research centers.

L'archive ouverte pluridisciplinaire HAL, est
destinée au dépôt et à la diffusion de documents
scientifiques de niveau recherche, publiés ou non,
émanant des établissements d'enseignement et de
recherche français ou étrangers, des laboratoires
publics ou privés.

<figure><img src="image_1.png" /></figure>

Distributed under a Creative Commons Attribution 4.0 International License
<figure><img src="image_2.png" /></figure>

# FP-Rainbow: Fingerprint-Based Browser Configuration Identification

Maxime Huyghe<fnref n="1" />, Walter Rudametkin<fnref n="2" />, Clément Quinton<fnref n="1" />

<figure><img src="image_3.png" /></figure>

## 1. Configuration exploration and Browser Fingerprint generation

<figure><img src="image_4.png" /></figure>

(1) launch each web Browser with default configuration parameters (CPØ) and with only one CP at time

(3) repeat for all configurations (version, OS, hardware, headless and headful)

<figure><img src="image_5.png" /></figure>

Chromium 128
Linux
Headless

<figure><img src="image_6.png" /></figure>

(2) generate and save each Browser Fingerprints (FP) and their configurations (CP, version, OS, hardware, etc.)

## FP-Rainbow

18 Browser versions x2 Headless
Headful

1,748

Explored
configuration
parameters (CP)

61,559

Generated
Browser
Fingerprints (FP)

## 2. Analysis and extraction of impacted attributes

(1) extracts attributes for each Browser Fingerprint

FP0

<figure><img src="image_7.png" /></figure>

(2) compares each attribute and "marks" them when different from the FP0

(3) each subset of impacted attributes is linked to their CP

FP1
(2a) Attribute with different value
(2b) Attribute doesn't exist in FP0
(2c) Attribute removed from FP0

CP1 =

(3a) with a value "XYZ"

(3b) removed from the FP

(3c) with name "ABC" and value "DEF"

FP2

<figure><img src="image_8.png" /></figure>

CP2 =

FPN

<figure><img src="image_9.png" /></figure>

(4) extraction and analysis are applied for each configuration (version, OS, hardware, etc.)

## Findings

12,334 to 16,473 attributes per FP

32 to 56 CP impacting the FP

## 3. Identification of configuration parameters from Browser Fingerprint

<figure><img src="image_10.png" /></figure>

Dataset

<figure><img src="image_11.png" /></figure>

## Results

78%

configuration parameters are identified

<figure><img src="image_12.png" /></figure>

Université de Lille

<figure><img src="image_13.png" /></figure>

Université de Rennes

<figure><img src="image_14.png" /></figure>

CRISTAL
Centre de Recherche en Informatique, Signal et Automatique de Lille

<figure><img src="image_15.png" /></figure>

Région
Hauts-de-France

<figure><img src="image_16.png" /></figure>

<figure><img src="image_17.png" /></figure>

<footnote n="1">¹Univ. Lille, CNRS, Inria, UMR 9189 CRISTAL</footnote>

<footnote n="2">²Univ. Rennes, CNRS, Inria, IRISA, IUF</footnote>