JavaScript: Bringing Object-Level Security to the Browser

Meyer, Charlie; Rabb, Maurice

Permalink

https://hdl.handle.net/2142/29944 Copy

Description

Title

JavaScript: Bringing Object-Level Security to the Browser

Author(s)

• Meyer, Charlie
• Rabb, Maurice

Issue Date

2009-05

Keyword(s)

• JavaScript
• Security

Abstract

JavaScript has evolved from a simple language intended to give web browsers basic hinteraction into a fully featured dynamic language that allows the browser to become an application delivery platform. With innovations such as asynchronous JavaScript and XML (AJAX) and JavaScript Object Notation (JSON), JavaScript has become the de facto standard for creating interactive web applications. With its new found power and popularity, JavaScript has been the target of many attacks. In this paper, we present a framework that allows programmers to define secure properties of JavaScript objects such that they are more immune to malicious activity and require a smaller footprint that existing solutions. We then use our framework and apply it to an already built JavaScript system to analyze its properties and effectiveness.

Type of Resource

text

Language

en

Permalink

http://hdl.handle.net/2142/29944

Owning Collections