Web Security

FakeX: A Framework for Detecting Fake Reviews of Browser Extensions
Browser extensions boost user experience on the web. Similarly to smartphone app stores, browsers like Chrome distribute browser …
Cite
Are Chrome Extensions Compliant with the Spirit of Least Privilege?
Extensions are small applications that are installed by users and enrich the user experience of browsing on the Internet. Browsers …
Cite DOI
DeDup.js: Discovering Malicious and Vulnerable Extensions by Detecting Duplication
Browser extensions are popular web applications that users install in modern browsers to enrich the user experience on the web. It is …
Cite DOI
Hardening the Security Analysis of Browser Extensions
Browser extensions boost browsing experience by a range of features from automatic translation and grammar correction to password …
Cite DOI URL
No Signal Left to Chance: Driving Browser Extension Analysis by Download Patterns
Browser extensions are popular small applications that allow users to enrich their browsing experience. Yet browser extensions pose …
Cite URL
After you, please: browser extensions order attacks and countermeasures
Browser extensions are small applications executed in the browser context that provide additional capabilities and enrich the user …
Cite DOI arXiv
HMAC and “secure preferences”: Revisiting chromium-based browsers security
Google disabled years ago the possibility to freely modify some internal configuration parameters, so options like silently (un)install …
Cite DOI