Reactive non-interference for a browser model

Nataliia Bielova; Dominique Devriese; Fabio Massacci; Frank Piessens

doi:10.1109/ICNSS.2011.6059965

Reactive non-interference for a browser model

Nataliia Bielova, Dominique Devriese, Fabio Massacci, Frank Piessens

Informatics and Applied Informatics

Research output: Chapter in Book/Report/Conference proceeding › Conference paper

39 Citations (Scopus)

Abstract

We investigate non-interference (secure information flow) policies for web browsers, replacing or complementing the Same Origin Policy. First, we adapt a recently proposed dynamic information flow enforcement mechanism to support asynchronous I/O. We prove detailed security and precision results for this enforcement mechanism, and implement it for the Featherweight Firefox browser model. Second, we investigate three useful web browser security policies that can be enforced by our mechanism, and demonstrate their value and limitations.

Original language	English
Title of host publication	Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011
Publisher	IEEE
Pages	97-104
Number of pages	8
ISBN (Print)	9781457704598
DOIs	https://doi.org/10.1109/ICNSS.2011.6059965
Publication status	Published - 17 Nov 2011
Event	2011 5th International Conference on Network and System Security, NSS 2011 - Milan, Italy Duration: 6 Sep 2011 → 8 Sep 2011

Conference

Conference	2011 5th International Conference on Network and System Security, NSS 2011
Country/Territory	Italy
City	Milan
Period	6/09/11 → 8/09/11

Access to Document

10.1109/ICNSS.2011.6059965

Cite this

@inproceedings{635e5ca092b143a7b77ec858e03b4bba,

title = "Reactive non-interference for a browser model",

abstract = "We investigate non-interference (secure information flow) policies for web browsers, replacing or complementing the Same Origin Policy. First, we adapt a recently proposed dynamic information flow enforcement mechanism to support asynchronous I/O. We prove detailed security and precision results for this enforcement mechanism, and implement it for the Featherweight Firefox browser model. Second, we investigate three useful web browser security policies that can be enforced by our mechanism, and demonstrate their value and limitations.",

author = "Nataliia Bielova and Dominique Devriese and Fabio Massacci and Frank Piessens",

year = "2011",

month = nov,

day = "17",

doi = "10.1109/ICNSS.2011.6059965",

language = "English",

isbn = "9781457704598",

pages = "97--104",

booktitle = "Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011",

publisher = "IEEE",

note = "2011 5th International Conference on Network and System Security, NSS 2011 ; Conference date: 06-09-2011 Through 08-09-2011",

}

TY - GEN

T1 - Reactive non-interference for a browser model

AU - Bielova, Nataliia

AU - Devriese, Dominique

AU - Massacci, Fabio

AU - Piessens, Frank

PY - 2011/11/17

Y1 - 2011/11/17

N2 - We investigate non-interference (secure information flow) policies for web browsers, replacing or complementing the Same Origin Policy. First, we adapt a recently proposed dynamic information flow enforcement mechanism to support asynchronous I/O. We prove detailed security and precision results for this enforcement mechanism, and implement it for the Featherweight Firefox browser model. Second, we investigate three useful web browser security policies that can be enforced by our mechanism, and demonstrate their value and limitations.

AB - We investigate non-interference (secure information flow) policies for web browsers, replacing or complementing the Same Origin Policy. First, we adapt a recently proposed dynamic information flow enforcement mechanism to support asynchronous I/O. We prove detailed security and precision results for this enforcement mechanism, and implement it for the Featherweight Firefox browser model. Second, we investigate three useful web browser security policies that can be enforced by our mechanism, and demonstrate their value and limitations.

UR - http://www.scopus.com/inward/record.url?scp=81055139598&partnerID=8YFLogxK

U2 - 10.1109/ICNSS.2011.6059965

DO - 10.1109/ICNSS.2011.6059965

M3 - Conference paper

AN - SCOPUS:81055139598

SN - 9781457704598

SP - 97

EP - 104

BT - Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011

PB - IEEE

T2 - 2011 5th International Conference on Network and System Security, NSS 2011

Y2 - 6 September 2011 through 8 September 2011

ER -

Reactive non-interference for a browser model

Abstract

Conference

Access to Document

Other files and links

Fingerprint

Cite this