Collected research

Carnus: Exploring the Privacy Threats of Browser Extension Fingerprinting

Soroush Karami, Panagiotis Ilia, Konstantinos Solomos and Jason Polakis · NDSS Symposium

Carnus automatically builds behavioural fingerprints of browser extensions from DOM changes, outgoing HTTP requests and intra-browser message traffic, not just web accessible resources. Fingerprinting 29,428 extensions and mining 1.44 million reviews, it shows a site can identify visitors and infer sensitive traits such as religion or medical conditions.

Record

Researcher

Soroush Karami, Panagiotis Ilia, Konstantinos Solomos and Jason Polakis

Published by

NDSS Symposium

Topic

Browser

In the archive

• Collected in the 2020 research round

Related sources

• NDSS 2020 Carnus: Exploring the Privacy Threats of Browser Extension Fingerprinting
• NDSS 2020 Carnus: Exploring the Privacy Threats of Browser Extension Fingerprinting

Tags

• browser-extension
• info-leak
• side-channel
• dom
• measurement-study
• large-scale-scan
• static-analysis
• dynamic-analysis

This page is the archive's own catalogue record. The research is the work of Soroush Karami, Panagiotis Ilia, Konstantinos Solomos and Jason Polakis, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.