1. Some from Chapter 11.9 – “Web” 4 th edition and https://www.httpwatch.com/httpgallery/headers/ SY306 Web and Databases for Cyber Operations Cookies and Web tracking

2. HTTP client-server interaction review

3. Cookies Cookie –Data stored on _____________ to maintain information about client during and between browser sessions WHY?? –Because after a web server sends a web page to a browser, the connection is shut down, and the webserver forgets everything about the user.

4. Cookies Cookies were invented to solve the problem "how to remember information about the user… Information is stored in the form of identifier=value pairs on a small text file These small text files are stored on the client’s hard-drive (Firefox and IE) The next time the client browser makes an HTTP request to the webserver, the small text files are sent as ‘cookies’ as part of the request. –Webserver will respond to client-browser with the html files –The html files will rendered under the context of having identifier=value pairs –This provides for a personalized browsing experience for each client browser Cookies can be set by client-side (Javascript) or server-side (Python)

5. Web Tracking Type of online advertising where ads are displayed based on the users web- browsing behavior. User will leave a trail of digital foot prints as they move from one website to the other. When a user surfs internet, their browsing activities are used by tracking sites to collect data. A user profile is created from the data and datamined for an online behavioral pattern of the user. As a result when users return to a specific site or a network of sites, the created user profiles helps advertisers reach a target audience.

6. Web Tracking Who performs behavioral targeting? –Online advertising networks such as google, shopzilla, etc How? –By collecting web surfing behavior and storing them in the form of third-party cookies.

7. Third party cookies Third party cookies are cookies that are set by web site with a domain name other than the one the user is currently visiting. For example, user visits website nordstrom.com, and the web page displays some content (image, advertisement, link, etc) ran by clothingads.com. The user is interested in the content so they click on it. Since clothingads.com owns the content, the user’s content request can set a cookie on domain clothingads.com The cookie set on clothingads.com domain is known as a third-party cookie. The fact that the user requested a specific image from clothingads.com allows advertisers to build a profile of the user. Advertisers use third-party cookies to track your visits and behavior to the various websites on which they advertise. Profiles get more refined as users browse on more site the advertisers advertise on

9. Countermeasures Disable third-party cookies from your browser Opt out of targeted advertising via browser extensions such as RequestPolicy, NoScript, Ghostery Set a ‘Do Not Track’ option on your browser settings. –Note: Advertisers may or may not adhere to this Set browser cookie policy to delete cookies after browsing session terminates.