News Release

YouTube users be aware: Your viewing habits can be tracked

Gaps in YouTube's encryption enable both government intelligence agencies, hackers and internet marketers to determine videos you watched

Peer-Reviewed Publication

American Associates, Ben-Gurion University of the Negev

BEER-SHEVA, Israel...March 15, 2017 -- Despite YouTube's attempts to safeguard user anonymity, intelligence agencies, hackers and online advertising companies can still determine which videos a user is watching, according to Ben-Gurion University of the Negev (BGU) research.

Ran Dubin, a doctoral student in the BGU Department of Communication Systems Engineering who is an expert in cyber security, presented this research at the Black Hat Europe meeting in London.

"We built a simple yet robust machine-learning algorithm that can identify which video you watched--within a predetermined set of videos--with a high degree of accuracy," Dubin says. "The algorithm is based on an in-depth study of how video services work, how video content is encoded and how a video player requests information to play it."  

Dubin was able to us this algorithm to determine if someone had watched a specific video from a set of suspicious, terror-related videos. Intelligence agencies could access this technology for tracking terrorists or other suspicious individuals. Internet marketing companies could track the number and make-up of viewers watching an ad.

While this information could be helpful, Dubin warns average YouTube users to be aware that their viewing history on YouTube and other internet video platforms can be tracked.

"It's important to know that video encryption is not as secure as we once thought," he says. "Google, YouTube's parent company, is not likely to patch the gaps, since it would be prohibitively expensive to create a traffic obfuscation mechanism for every user's every video request."  

Researchers are exploring an upside to this discovery: the ability to assess video quality without breaking an encryption. "While internet service providers want to ensure they are providing high quality streaming, encryption has made accessing information much more challenging," says Dubin. "This tracking algorithm could help."

###

About American Associates, Ben-Gurion University of the Negev

American Associates, Ben-Gurion University of the Negev (AABGU) plays a vital role in sustaining David Ben-Gurion's vision: creating a world-class institution of education and research in the Israeli desert, nurturing the Negev community and sharing the University's expertise locally and around the globe. As Ben-Gurion University of the Negev (BGU) looks ahead to turning 50 in 2020,

AABGU imagines a future that goes beyond the walls of academia. It is a future where BGU invents a new world and inspires a vision for a stronger Israel and its next generation of leaders. Together with supporters, AABGU will help the University foster excellence in teaching, research and outreach to the communities of the Negev for the next 50 years and beyond. Visit vision.aabgu.org to learn more.

AABGU, which is headquartered in Manhattan, has nine regional offices throughout the United States. For more information, visit http://www.aabgu.org.


Disclaimer: AAAS and EurekAlert! are not responsible for the accuracy of news releases posted to EurekAlert! by contributing institutions or for the use of any information through the EurekAlert system.