Flashproxy: Transparently enabling rich Web content via remote execution

MobiSys'08 - Proceedings of the 6th International Conference on Mobile Systems, Applications, and Services

Volumn , Issue , 2008, Pages 81-93

  Moshchuk, Alexander ^a   Gribble, Steven D ^a   Levy, Henry M ^a  

^a University of Washington   (United States)

Author keywords

Active Web content; Binary rewriting; Flash; Proxy; Web browsers

Indexed keywords

APPLICATIONS; COMPUTER SOFTWARE; FLOW INTERACTIONS; JAVA PROGRAMMING LANGUAGE; MOBILE COMPUTING; MOBILE DEVICES; PORTABLE EQUIPMENT; SEMICONDUCTOR SWITCHES; TELECOMMUNICATION EQUIPMENT; VIDEO STREAMING; WEBSITES; WORLD WIDE WEB;

ACTIVE CONTENTS; ACTIVE WEB CONTENT; ACTIVE WEB CONTENTS; APPLETS; BINARY REWRITING; DISPLAY COMPONENTS; EXECUTION ENVIRONMENTS; FLASH; INTERACTIVE APPLICATIONS; JAVASCRIPT; MOBILE WEB BROWSERS; PHYSICAL RESOURCES; PRIVATE DATUMS; PROXY; REMOTE EXECUTIONS; SECURITY FLAWS; WEB CONTENTS; WEB PAGES;

WEB BROWSERS;

EID: 57349143314     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1378600.1378611     Document Type: Conference Paper

References (34)

1. ADAMS, K., AND AGESEN, O. A comparison of software and hardware techniques for × 86 virtualization. In Proceedings of the Twelfth International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS XII) (Seattle, WA, March 2006).
2. BICKMORE, T. W., AND SCHILIT, B. N. Digestor: Device-independent access to the world wide web. In Proceedings of Sixth International World Wide Web Conference (WWW 1997) (Santa Clara, CA, April 1997).
3. Brooks, C., Mazer, M. S., Meeks, S., and Miller, J. Application-specific proxy servers as HTTP stream transducers. In Proceedings of the Fourth International World Wide Web Conference (WWW 1995) (Boston, MA, December 1995).
4. Chawathe, Y., McCanne, S., and Brewer, E. RMX: Reliable multicast in heterogeneous environments. In Proceedings of IEEE INFOCOM 2000 (Tel-Aviv, Israel, March 2000).
5. Cohen, G. A., Chase, J. S., and Kaminsky, D. L. Automatic program transformation with JOIE. In Proceedings of the 1998 USENIX Annual Technical Symposium (New Orleans, LA, June 1998).
6. de Lara, E., Kumar, R., Wallach, D. S., and Zwaenepoel, W. Collaboration and multimedia authoring on mobile devices. In Proceedings of the First International Conference on Mobile Systems, Applications, and Services (MobiSys 2003) (San Francisco, CA, May 2003).
7. de Lara, E., Wallach, D. S., and Zwaenepoel, W. Puppeteer: Component-based adaptation for mobile computing. In Proceedings of the 3rd USENIX Symposium on Internet Technologies and Systems (USITS'01) (San Francisco, CA, March 2001).
8. EVANS, D., AND TWYMAN, A. Flexible policy-directed code safety. In Proceedings of the 1999 IEEE Symposium on Security and Privacy (Oakland, CA, May 1999).
9. FOX, A., AND BREWER, E. A. Reducing WWW latency and bandwidth requirements by real-time distillation. In Proceedings of the Fifth International World Wide Web Conference (WWW 1996) (Paris, France, May 1996).
10. Fox, A., Goldberg, I., Gribble, S. D., and Lee, D. C. Experience with Top Gun Wingman: A proxy-based graphical web browser for the 3Com PalmPilot. In Proceedings of the Middleware'98 (Lake District, England, September 1998).
11. FULTON, J., AND KANTARJIEV, C. K. An update on low bandwidth X (LBX). The X Resource, 5 (1993), 251-266.
12. GARRETT, J. J. Ajax: A new approach to Web applications. http://www.adaptivepath.com/publications/essays/archives/000385.php. February 2005.
13. HAYDEN, D. OBFU: A Flash Actionscript obfuscator. http://www.opaque.net/~dave/obfu/.2001.
14. HAYDEN, D., MORTON, D., Kogan, I., AND ZHEN, W. The Flasm command line assembler/disassembler of flash actionscript bytecode. http://www.nowrap.de/flasm, 2007.
15. INTERNET ARCHIVE. The Heritrix Web crawler project. http://crawler.archive.orq/.
16. JSON. http://www.json.orq/
17. KIM. J., BARATTO. R. A., AND NIEH, J. pTHINC: A thin client architecture for mobile wireless web. In Proceedings of the Fifteenth International World Wide Web Conference (WWW 2006) (Edinburgh, Scotland, May 2006).
18. LEE, H. B., AND ZORN, B. G. BIT: A tool for instrumenting Java bytecodes. In Proceedings of the USENIX Symposium on Internet Technologies and Systems (USITS'97) (Monterey, CA, December 1997).
19. LINN, C., AND DEBRAY, S. Obfuscation of executable code to improve resistance to static disassembly. In Proceedings of the 10th ACM Conference on Computer and Communications Security (CCS 2003) (Washington, DC, October 2003).
20. MATHERS, T. W., AND GENOWAY, S. P. Windows NT Thin Client Solutions: Implementing Terminal Server and Citrix Meta Frame. Macmillan Technical Publishing, Indianapolis, IN, November 1998.
21. Reis, C., Dunagan, J., Wang, H. J., Dubrovsky, O., and ESMEIR, S. BrowserShield: Vulnerability-driven filtering of dynamic HTML. In Proceedings of the 7th USENIX Symposium on Operating Systems Design and Implementation (OSDI'06) (Seattle, WA, November 2006).
22. Richardson, T., Stafford-Fraser, Q., Wood, K. R., and HOPPER, A. Virtual network computing. IEEE Internet Computing 2, 1 (1998), 33-38.
23. SCHEIFLER, R. W., AND GETTYS, J, The X window system. ACM Transactions on Graphics (TOG) 5, 2 (April 1986), 79-109.
24. Schmidt, B. K., Lam, M. S., and Northcutt, J. D. The interactive performance of SLIM: a stateless, thin-client architecture. In Proceedings of the 17th ACM Symposium on Operating Systems Principles (SOSP'99) (Kiawah Isiand Resort, SC, December 1999).
25. SECUNIA. Macromedia Flash ActiveX denial of service. http://secunia.com/advisories/7545/, November 2002.
26. SECUNIA. Adobe Flash Player multiple vulnerabilities. http://secunia.com/advisories/26027/.July 2007.
27. Sirer, E. G., Grimm, R., Gregory, A. J., and Bershad, B. N. Design and implementation of a distributed virtual machine for networked computers. In Proceedings of the 17th ACM Symposium on Operating Systems Principles (SOSP'99) (Kiawah Island Resort, SC, December 1999).
28. Sites, R. L., Chernoff, A., Kirk, M. B., Marks, M. P., and ROBINSON, S. G. Binary translation. Communications of the ACM 36, 2 (February 1993).
29. SONG, Y., AND FLEISCH, B. D. Rico: A security proxy for mobile code. Journal of Computers and Security 23, 4 (2004), 338-351.
30. SONG, Y., AND FLEISCH, B. D. Utilizing binary rewriting for improving end-host security. IEEE Transactions on Parallel and Distributed Systems 18, 12 (December 2007), 1687-1699.
31. SONG, Y., Xu, Y., AND FLEISCH, B. D. Design and performance evaluation of a proxy-based Java rewriting security system. In Proceedings of the 26th IEEE International Conference on Distributed Computing Systems, (ICDCS 26) (Lisboa, Portugal, July 2006).
32. Van Put, L., Chanet, D., De Bus, B., De Sutter, B., and De BOSSCHERE, K. DIABLO: a reliable, retargetable and extensible link-time rewriting framework. In Proceedings of the 2005 IEEE International Symposium, On Signal Processing And Information Technology (Athens, Greece, December 2005).
33. Wahbe, R., Lucco, S., Anderson, T. E., and Graham, S. L. Efficient software-based fault isolation. ACM SIGOPS Operating Systems Review 27, 5 (December 1993), 203-216.
34. ZENEL, B., AND DUCHAMP, D. A general purpose proxy filtering mechanism applied to the mobile environment. In Proceedings of the 3rd Annual ACM/IEEE International Conference on Mobile Computing and Networking (Mobicom'97) (Budapest, Hungary, September 1997).