Andrei Sabelfeld

Latest

• FakeX: A Framework for Detecting Fake Reviews of Browser Extensions
• Are Chrome Extensions Compliant with the Spirit of Least Privilege?
• DeDup.js: Discovering Malicious and Vulnerable Extensions by Detecting Duplication
• Hardening the Security Analysis of Browser Extensions
• No Signal Left to Chance: Driving Browser Extension Analysis by Download Patterns
• HMAC and “secure preferences”: Revisiting chromium-based browsers security
• Latex Gloves: Protecting Browser Extensions from Probing and Revelation Attacks