Sökning: "JavaScript security"

Visar resultat 1 - 5 av 10 avhandlingar innehållade orden JavaScript security.

  1. 1. Lightweight Enforcement of Fine-Grained Security Policies for Untrusted Software

    Författare :Phu Phung; Chalmers tekniska högskola; []
    Nyckelord :NATURVETENSKAP; NATURAL SCIENCES; NATURVETENSKAP; NATURAL SCIENCES; security policy enforcement; JavaScript security; web-application security; vehicle software security; untrusted software;

    Sammanfattning : This thesis presents an innovative approach to implementing a security enforcement mechanism in the contexts of untrusted software systems, where a piece of code in a base system may come from an untrusted third party. The key point of the approach is that it is lightweight in the sense that it does not need an additional policy language or extra tool. LÄS MER

  2. 2. Lightweight Inlined Reference Monitors for Securing Extensible and Open Systems

    Författare :Phu Phung; Chalmers tekniska högskola; []
    Nyckelord :NATURVETENSKAP; NATURAL SCIENCES; NATURVETENSKAP; NATURAL SCIENCES; Security; Inlined Reference Monitors; JavaScript; Vehicle Software Security;

    Sammanfattning : This thesis studies an alternative implementation of asecurity reference monitor in the contexts of extensible and opensystems. A security reference monitor is a classic approach to imposing asecurity policy on an otherwise untrusted system by using a trusted componentwhich intercepts security-relevant resource requests and applies a securitypolicy to decide whether to grant such requests. LÄS MER

  3. 3. Tracking Dependencies for Security and Privacy

    Författare :Arnar Birgisson; Chalmers tekniska högskola; []
    Nyckelord :NATURVETENSKAP; NATURAL SCIENCES; Programming Languages; Software Security; Web Security;

    Sammanfattning : Information Flow Control is a well established field of research, providing asuite of theoretical and practical results. However, adoption to real worldsystems has yet to catch up. This thesis seeks to expand the boundaries ofthis field, in particular with the aim of making Information Flow Control moreapplicable to real world scenarios. LÄS MER

  4. 4. Information Flow for Web Security and Privacy

    Författare :Alexander Sjösten; Chalmers tekniska högskola; []
    Nyckelord :TEKNIK OCH TEKNOLOGIER; ENGINEERING AND TECHNOLOGY; NATURVETENSKAP; NATURAL SCIENCES; browser extensions; side-effectful libraries; information-flow control; web security; filter list generation; browser fingerprinting;

    Sammanfattning : The use of libraries is prevalent in modern web development. But how to ensure sensitive data is not being leaked through these libraries? This is the first challenge this thesis aims to solve. LÄS MER

  5. 5. Artificial Software Diversification for WebAssembly

    Författare :Javier Cabrera Arteaga; Benoit Baudry; Martin Monperrus; Tobias Wrigstad; KTH; []
    Nyckelord :TEKNIK OCH TEKNOLOGIER; ENGINEERING AND TECHNOLOGY; TEKNIK OCH TEKNOLOGIER; ENGINEERING AND TECHNOLOGY; WebAssembly; LLVM; Software Diversity; Automatic Software Engineering; Security; Electrical Engineering; Elektro- och systemteknik;

    Sammanfattning : WebAssembly has become the fourth official web language, along with HTML, CSS and JavaScript since 2019. WebAssembly allows web browsers to execute existing programs or libraries written in other languages, such as C/C++ and Rust. In addition, WebAssembly evolves to be part of edge-cloud computing platforms. LÄS MER