Browser extension-based man-in-the-browser attacks against Ajax applications with countermeasures
Ville Leppänen; Sampsa Rauti
Browser extension-based man-in-the-browser attacks against Ajax applications with countermeasures
Ville Leppänen
Sampsa Rauti
Julkaisun pysyvä osoite on:
https://urn.fi/URN:NBN:fi-fe2021042715039
https://urn.fi/URN:NBN:fi-fe2021042715039
Tiivistelmä
As the web pages today rely on Ajax and JavaScript, a larger attack surface becomes available. This paper presents in detail several different man-in-the-browser attacks against Ajax applications. We implemented browser extensions for Mozilla Firefox to demonstrate these attacks and their effectiveness. Some countermeasures to mitigate the problem are also considered. We conclude that man-in-the-browser attacks are a serious threat to online applications and there are only partial countermeasures to alleviate the problem.
Kokoelmat
- Rinnakkaistallenteet [19207]