Web Security

FakeX: A Framework for Detecting Fake Reviews of Browser Extensions

Browser extensions boost user experience on the web. Similarly to smartphone app stores, browsers like Chrome distribute browser extensions via their Web Store, enabling a thriving …

eric-olsson
•

No Signal Left to Chance: Driving Browser Extension Analysis by Download Patterns

Browser extensions are popular small applications that allow users to enrich their browsing experience. Yet browser extensions pose security concerns because they can leak user …

pablo-picazo-sanchez
•

Hardening the Security Analysis of Browser Extensions

Browser extensions boost browsing experience by a range of features from automatic translation and grammar correction to password management, ad blocking, and remote desktops. Yet …

benjamin-eriksson
•

DeDup.js: Discovering Malicious and Vulnerable Extensions by Detecting Duplication

Browser extensions are popular web applications that users install in modern browsers to enrich the user experience on the web. It is common for browser extensions to include …

pablo-picazo-sanchez
•

Are Chrome Extensions Compliant with the Spirit of Least Privilege?

Extensions are small applications that are installed by users and enrich the user experience of browsing on the Internet. Browsers expose a set of restricted APIs to extensions …

pablo-picazo-sanchez
•

HMAC and “secure preferences”: Revisiting chromium-based browsers security

Google disabled years ago the possibility to freely modify some internal configuration parameters, so options like silently (un)install browser extensions, changing the home page …

pablo-picazo-sanchez
•

After you, please: browser extensions order attacks and countermeasures

Browser extensions are small applications executed in the browser context that provide additional capabilities and enrich the user experience while surfing the web. The acceptance …

pablo-picazo-sanchez
•