Matches in SemOpenAlex for { <https://semopenalex.org/work/W4225538002> ?p ?o ?g. }
Showing items 1 to 77 of
77
with 100 items per page.
- W4225538002 abstract "Web browsers are integral parts of everyone's daily life. They are commonly used for security-critical and privacy sensitive tasks, like banking transactions and checking medical records. Unfortunately, modern web browsers are too complex to be bug free (e.g., 25 million lines of code in Chrome), and their role as an interface to the cyberspace makes them an attractive target for attacks. Accordingly, web browsers naturally become an arena for demonstrating advanced exploitation techniques by attackers and state-of-the-art defenses by browser vendors. Web browsers, arguably, are the most exciting place to learn the latest security issues and techniques, but remain as a black art to most security researchers because of their fast-changing characteristics and complex code bases. To bridge this gap, this paper attempts to systematize the security landscape of modern web browsers by studying the popular classes of security bugs, their exploitation techniques, and deployed defenses. More specifically, we first introduce a unified architecture that faithfully represents the security design of four major web browsers. Second, we share insights from a 10-year longitudinal study on browser bugs. Third, we present a timeline and context of mitigation schemes and their effectiveness. Fourth, we share our lessons from a full-chain exploit used in 2020 Pwn2Own competition. and the implication of bug bounty programs to web browser security. We believe that the key takeaways from this systematization can shed light on how to advance the status quo of modern web browsers, and, importantly, how to create secure yet complex software in the future." @default.
- W4225538002 created "2022-05-05" @default.
- W4225538002 creator A5027591580 @default.
- W4225538002 creator A5039969566 @default.
- W4225538002 creator A5062176328 @default.
- W4225538002 creator A5070652882 @default.
- W4225538002 creator A5071738824 @default.
- W4225538002 creator A5073751476 @default.
- W4225538002 creator A5073983052 @default.
- W4225538002 creator A5076477100 @default.
- W4225538002 creator A5091606131 @default.
- W4225538002 date "2021-12-31" @default.
- W4225538002 modified "2023-09-27" @default.
- W4225538002 title "SOK: On the Analysis of Web Browser Security" @default.
- W4225538002 doi "https://doi.org/10.48550/arxiv.2112.15561" @default.
- W4225538002 hasPublicationYear "2021" @default.
- W4225538002 type Work @default.
- W4225538002 citedByCount "0" @default.
- W4225538002 crossrefType "posted-content" @default.
- W4225538002 hasAuthorship W4225538002A5027591580 @default.
- W4225538002 hasAuthorship W4225538002A5039969566 @default.
- W4225538002 hasAuthorship W4225538002A5062176328 @default.
- W4225538002 hasAuthorship W4225538002A5070652882 @default.
- W4225538002 hasAuthorship W4225538002A5071738824 @default.
- W4225538002 hasAuthorship W4225538002A5073751476 @default.
- W4225538002 hasAuthorship W4225538002A5073983052 @default.
- W4225538002 hasAuthorship W4225538002A5076477100 @default.
- W4225538002 hasAuthorship W4225538002A5091606131 @default.
- W4225538002 hasBestOaLocation W42255380021 @default.
- W4225538002 hasConcept C108827166 @default.
- W4225538002 hasConcept C110875604 @default.
- W4225538002 hasConcept C136764020 @default.
- W4225538002 hasConcept C151730666 @default.
- W4225538002 hasConcept C165696696 @default.
- W4225538002 hasConcept C166957645 @default.
- W4225538002 hasConcept C21959979 @default.
- W4225538002 hasConcept C2779343474 @default.
- W4225538002 hasConcept C2781241145 @default.
- W4225538002 hasConcept C38652104 @default.
- W4225538002 hasConcept C41008148 @default.
- W4225538002 hasConcept C4438859 @default.
- W4225538002 hasConcept C59241245 @default.
- W4225538002 hasConcept C79373723 @default.
- W4225538002 hasConcept C86803240 @default.
- W4225538002 hasConcept C95457728 @default.
- W4225538002 hasConceptScore W4225538002C108827166 @default.
- W4225538002 hasConceptScore W4225538002C110875604 @default.
- W4225538002 hasConceptScore W4225538002C136764020 @default.
- W4225538002 hasConceptScore W4225538002C151730666 @default.
- W4225538002 hasConceptScore W4225538002C165696696 @default.
- W4225538002 hasConceptScore W4225538002C166957645 @default.
- W4225538002 hasConceptScore W4225538002C21959979 @default.
- W4225538002 hasConceptScore W4225538002C2779343474 @default.
- W4225538002 hasConceptScore W4225538002C2781241145 @default.
- W4225538002 hasConceptScore W4225538002C38652104 @default.
- W4225538002 hasConceptScore W4225538002C41008148 @default.
- W4225538002 hasConceptScore W4225538002C4438859 @default.
- W4225538002 hasConceptScore W4225538002C59241245 @default.
- W4225538002 hasConceptScore W4225538002C79373723 @default.
- W4225538002 hasConceptScore W4225538002C86803240 @default.
- W4225538002 hasConceptScore W4225538002C95457728 @default.
- W4225538002 hasLocation W42255380021 @default.
- W4225538002 hasOpenAccess W4225538002 @default.
- W4225538002 hasPrimaryLocation W42255380021 @default.
- W4225538002 hasRelatedWork W1536295802 @default.
- W4225538002 hasRelatedWork W2031340751 @default.
- W4225538002 hasRelatedWork W2132005014 @default.
- W4225538002 hasRelatedWork W2399241418 @default.
- W4225538002 hasRelatedWork W2409472146 @default.
- W4225538002 hasRelatedWork W2476894313 @default.
- W4225538002 hasRelatedWork W2624953305 @default.
- W4225538002 hasRelatedWork W2754568388 @default.
- W4225538002 hasRelatedWork W4225538002 @default.
- W4225538002 hasRelatedWork W744349438 @default.
- W4225538002 isParatext "false" @default.
- W4225538002 isRetracted "false" @default.
- W4225538002 workType "article" @default.