Utilizing OCR Technology to Prevent Inconsistent Actions Triggered by a Cookie Banner Button

NCUIR > College of Electrical Engineering & Computer Science > Graduate Institute of Computer Science and Information Engineering > Electronic Thesis & Dissertation > Item 987654321/92530

Please use this identifier to cite or link to this item: http://ir.lib.ncu.edu.tw/handle/987654321/92530

Title:	Utilizing OCR Technology to Prevent Inconsistent Actions Triggered by a Cookie Banner Button
Authors:	連育陞;Lian, Yu-Sheng
Contributors:	資訊工程學系
Keywords:	資料保護規則;光學字元辨識;擴充元件;點擊劫持;GDPR;OCR;extension;Clickjacking;cookie banner
Date:	2023-07-20
Issue Date:	2023-10-04 16:04:10 (UTC+8)
Publisher:	國立中央大學
Abstract:	歐盟在2018年5月25日，開始實行通用資料保護規則(GDPR)，這項規則規定與歐洲相關的網站必須告知用戶並取得用戶的同意才能在網站上使用他們的個人資訊，包含cookies。雖然這項規定看似合理，但獲取同意的方式導致用戶必須在每個新造訪的網站上進行一次點擊的行為，以獲得最佳的網頁體驗。然而，在這樣的情況下，不經意的讓使用者養成了快速的「接受」網站要求的內容，才得以快速的瀏覽所想要的內容。而這樣的習慣可能導致使用者在不知不覺中「接受」了攻擊者在網路上要求的惡意行為。因此我們利用光學字元辨識(OCR)技術開發了一款Chrome的擴充元件，為瀏覽器增添了視覺感知的能力。讓過去僅僅只是以監聽器的方式運作的瀏覽器，增加了視覺分析的能力，透過模擬使用者的眼睛，並分析所見的內容，進而調查監聽到的行為與網頁組件文本之間，是否有言行舉止前後不一的現象，最後採取適當的預防措施。;On May 25, 2018, the European Union implemented the General Data Protection Regulation (GDPR), which regulates that websites related to Europe must inform users and obtain their consent to utilize their personal data, including cookies, on web pages. While this regulation may seem reasonable, the method of obtaining consent has resulted in users having to click on the "Accept" buttons on every new website to achieve the best website experience. However, inadvertently developing a habit of automatically agreeing without fully understanding the implications may lead to unknowingly consenting to malicious activities perpetrated by individuals with deceptive intentions on the internet. Therefore, we developed a browser extension utilizing OCR technology to provide the Chrome browser with visual perception capabilities. This extension allows the browser, which traditionally relies solely on listener actions, to simulate the visual content perceived by users. By analyzing the text on the buttons, we aim to detect inconsistencies between the observed behavior and the intended purpose of webpage components, and subsequently implement preventive measures.
Appears in Collections:	[Graduate Institute of Computer Science and Information Engineering] Electronic Thesis & Dissertation

Files in This Item:

File	Description	Size	Format
index.html		0Kb	HTML	35	View/Open

社群 sharing

Loading...