Skip to main content
Springer Nature Link
Log in

Web Browsers and Security

  • Chapter
  • First Online:
Mobile Agents and Security

Part of the book series: Lecture Notes in Computer Science ((LNCS,volume 1419))

Abstract

Today the World Wide Web is considered to be a platform for building distributed applications. This evolution is made possible by browsers with processing capabilities and by programming languages that allow web designers to embed real programs into HTML documents. Downloading and executing code from anywhere on the Internet brings security problems along with it. A systematic and thorough analysis of security flaws in the browsers and related technology is necessary to reach a sufficient level of confidence. This paper presents some preliminary results of ongoing research that has the final goal of developing properties for secure browsers and procedures for secure browsing. The research started by investigating features provided by the standard environment. The paper describes some experimental attacks that have been carried out by exploiting features of Java and JavaScript executed by Netscape Navigator and Microsoft Explorer browsers.

This is a revised and extended version of [2].

This research was partially supported by PulsePoint Communications and the University of California through a Micro Grant.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution

Subscribe and save

Springer+ Basic
$34.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Similar content being viewed by others

References

  1. Drew Dean, Edward W. Felten, and Dan S. Wallach, Java Security: From HotJava to Netscape and Beyond, Proc. of 1996 IEEE Symposium on Security and Privacy, (http://www.cs.princeton.edu/sip/pub/secure96.html).

  2. Flavio De Paoli, Andre L. Dos Santos, and Richard A. Kemmerer, Vulnerability of “Secure” Web Browsers, Proceedings of the 20th National Information Systems Security Conference, Baltimore, MD, USA, October 6–10, 1997.

    Google Scholar 

  3. Digicrime, Online Security Experiments, Digicrime, Inc., (http://www.digicrime.com).

  4. Edward W. Felten, Dirk Balfanz, Drew Dean, and Dan S. Wallach, Web Spoofing: An Internet Con Game, Proceedings of the 20th National Information Systems Security Conference, Baltimore, MD, USA, October 6–10, 1997, (http://www.cs.princeton.edu/sip/pub/spoofing.html).

  5. James Gosling, Bill Joy, and Guy Steele, The Java Language Specification, ISBN 0-201-63451-1, The Java Series, Addison Wesley, 1996, (http://www.nge.com/home/java/spec10/index.html).

  6. Jason Levitt, Internetview: An Application Infrastructure, Information Week, June 1996, (http://www.techweb.cmp.com/iw/582/82iojl.html).

  7. Tim Lindholm and Frank Yellin, The Java Virtual Machine Specification, ISBN 0-201-63452-X, The Java Series, Addison Wesley, 1996.

    Google Scholar 

  8. Netscape, “ldLiveConnect,” Netscape web site, 1997, http://www.home.netscape.com/comprod/products/navigator/version_3.0/building_blocks/liveconnect/index.html.

  9. D. Martin, S. Rajagopalan and A. Rubin, “Blocking Java Applets at the Firewall,” in Proceedings of the InternetSociety Symposium on Network and Distributed System Security, February 10–11, 1997.

    Google Scholar 

  10. Jim Roskind, Navigator 2.02 Security-Related FAQ, May 1996, (http://www.home.netscape.com/newsref/std/java_security_faq.html).

  11. Siemens, “Embedding Java into smart card ICs”, SPECTRUM, Siemens Components Magazine, April 1997, (http://www.w2.siemens.de/components/com9704/04spect.htm#VIER).

  12. Lincoln D. Stein, WWW Security Faq, version 1.3.7, March 30, 1997, (http://www.genome.wi.mit.edu/WWW/faqs/www-security-faq.html).

Download references

Author information

Authors and Affiliations

  1. Reliable Software Group, Computer Science Department, University of California, Santa Barbara, CA, 93106, USA

    Flavio De Paoli, Andre L. Dos Santos & Richard A. Kemmerer

Authors
  1. Flavio De Paoli
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Andre L. Dos Santos
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Richard A. Kemmerer
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. Computer Science Department, University of California, Santa Barbara, CA, 93106-5110, USA

    Giovanni Vigna

Rights and permissions

Reprints and permissions

Copyright information

© 1998 Springer-Verlag Berlin Heidelberg

About this chapter

Cite this chapter

De Paoli, F., Dos Santos, A.L., Kemmerer, R.A. (1998). Web Browsers and Security. In: Vigna, G. (eds) Mobile Agents and Security. Lecture Notes in Computer Science, vol 1419. Springer, Berlin, Heidelberg. https://doi.org/10.1007/3-540-68671-1_13

Download citation

  • DOI: https://doi.org/10.1007/3-540-68671-1_13

  • Published:

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-540-64792-8

  • Online ISBN: 978-3-540-68671-2

  • eBook Packages: Springer Book Archive

Publish with us

Policies and ethics

Search

Navigation