A self-correcting information flow control model for the web-browser

Deepak Subramanian (1) , Guillaume Hiet (1) , Christophe Bidan (1)

1 CIDRE - Confidentialité, Intégrité, Disponibilité et Répartition

Web-browser security with emphasis on JavaScript security, is one of the important problems of the modern world. The potency of information flow control (IFC) in the context of JavaScript is quite appealing. In this paper, we propose a novel approach to help track and learn from information flows. This learnt data can subsequently be used to create a more adaptive and effective IFC model. As the information about a function augments, potential leaks are also thwarted.

Domaines: Cryptographie et sécurité [cs.CR]

Deepak Subramanian, Guillaume Hiet, Christophe Bidan. A self-correcting information flow control model for the web-browser. FPS 2016 - The 9th International Symposium on Foundations & Practice of Security, Oct 2016, Québec City, Canada. pp.285-301, ⟨10.1007/978-3-319-51966-1_19⟩. ⟨hal-01398192⟩