Sökning: hsv:(NATURVETENSKAP) hsv:(Data och informationsvetenskap) hsv:(Datavetenskap) >
Are chrome extensio...
Are chrome extensions compliant with the spirit of least privilege?
-
- Picazo-Sanchez, Pablo, 1985 (författare)
- Chalmers tekniska högskola,Chalmers University of Technology
-
Ortiz-Martin, Lara (författare)
-
- Schneider, Gerardo, 1967 (författare)
- Gothenburg University,Göteborgs universitet,Institutionen för data- och informationsteknik, datorteknik (GU),Department of Computer Science and Engineering, Computer Engineering (GU)
-
visa fler...
-
- Sabelfeld, Andrei, 1974 (författare)
- Chalmers tekniska högskola,Chalmers University of Technology
-
visa färre...
-
(creator_code:org_t)
- 2022-09-04
- 2022
- Engelska.
-
Ingår i: International Journal of Information Security. - : Springer Science and Business Media LLC. - 1615-5262 .- 1615-5270. ; 21:6, s. 1283-1297
- Relaterad länk:
-
https://research.cha... (primary) (free)
-
visa fler...
-
https://research.cha...
-
https://doi.org/10.1...
-
https://gup.ub.gu.se...
-
visa färre...
Abstract
Ämnesord
Stäng
- Extensions are small applications installed by users and enrich the user experience of browsing the Internet. Browsers expose a set of restricted APIs to extensions. To be used, extensions need to list the permissions associated with these APIs in a mandatory extension file named manifest. In particular, Chrome’s permission ecosystem was designed in the spirit of the least privilege. Yet, this paper demonstrates that 39.8% of the analyzed extensions provided by the official Web Store are compliant with the spirit of least privilege. Also, we develop: (1) a browser extension to make aware regular users of the permissions the extensions they install; (2) a web app where extensions developers can check whether their extensions are compliant with the spirit of the least privileged; and (3) a set of scripts that can be part of the vendors’ acceptance criteria such that when developers upload their extensions to the official repositories, the scripts automatically analyze the extensions and generate a report about the permissions and the usage.
Ämnesord
- NATURVETENSKAP -- Data- och informationsvetenskap -- Medieteknik (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Media and Communication Technology (hsv//eng)
- NATURVETENSKAP -- Data- och informationsvetenskap -- Människa-datorinteraktion (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Human Computer Interaction (hsv//eng)
- NATURVETENSKAP -- Data- och informationsvetenskap -- Datavetenskap (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Computer Sciences (hsv//eng)
- NATURVETENSKAP -- Data- och informationsvetenskap (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences (hsv//eng)
Nyckelord
- Web security
- Privacy
- Browser extensions
- Browser extensions
- Privacy
- Web security
Publikations- och innehållstyp
- art (ämneskategori)
- ref (ämneskategori)
Hitta via bibliotek
Till lärosätets databas