Pareto-optimal Defenses for the Web Infrastructure: Theory and Practice

Autor: Giorgio Di Tizio, Patrick Speicher, Milivoj Simeonovski, Michael Backes, Ben Stock, Robert Künnemann

Publikováno v: ACM Transactions on Privacy and Security. 26:1-36

The integrity of the content a user is exposed to when browsing the web relies on a plethora of non-web technologies and an infrastructure of interdependent hosts, communication technologies, and trust relations. Incidents like the Chinese Great Cann

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::511ec3d52510bafa05a12e385a43c63c
https://doi.org/10.1145/3567595

Freely Given Consent?

Autor: Trung Tin Nguyen, Michael Backes, Ben Stock

Publikováno v: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security.

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::8bf67a8a1d83836005dd494b1044aaa6
https://doi.org/10.1145/3548606.3560564

To hash or not to hash: A security assessment of CSP’s unsafe-hashes expression

Autor: Peter Stolz, Sebastian Roth, Ben Stock

Publikováno v: 2022 IEEE Security and Privacy Workshops (SPW).

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::ca7c05f7acc7b269ee335a23f9e0caf7
https://doi.org/10.1109/spw54247.2022.9833888

12 Angry Developers - A Qualitative Study on Developers' Struggles with CSP

Autor: Michael Backes, Sebastian Roth, Lea Theresa Gröber, Ben Stock, Katharina Krombholz

Publikováno v: CCS

The Web has improved our ways of communicating, collaborating, teaching, and entertaining us and our fellow human beings. However, this cornerstone of our modern society is also one of the main targets of attacks, most prominently Cross-Site Scriptin

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::a40dfcb51b49cc39101b66b6f82e5ec8
https://doi.org/10.1145/3460120.3484780

Careful Who You Trust: Studying the Pitfalls of Cross-Origin Communication

Autor: Gordon Meiser, Pierre Laperdrix, Ben Stock

Publikováno v: AsiaCCS
ASIACCS 2021-16th ACM Asia Conference on Computer and Communications Security
ASIACCS 2021-16th ACM Asia Conference on Computer and Communications Security, Jun 2021, Hong Kong / Virtual, China

International audience; In the past, Web applications were mostly static and most of the content was provided by the site itself. Nowadays, they have turned into rich client-side experiences customized for the user where third parties supply a consid

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::6d7269773433ef44744d779dd3342505
https://doi.org/10.1145/3433210.3437510