WhiteScript: Using social network analysis parameters to balance between browser usability and malware exposure

Computers and Security

Volumn 30, Issue 1, 2011, Pages 4-12

  Sadan, Zac ^a   Schwartz, David ^a  

^a BAR ILAN UNIVERSITY   (Israel)

Author keywords

JavaScript; Malware; NoScript; Social network analysis; Web browser

Indexed keywords

BROWSER SECURITY; DYNAMIC CONTENT; FIREFOX; HTML PAGES; INTERNET EXPLORERS; INTERNET USERS; JAVASCRIPT; MALWARES; NOSCRIPT; SENSITIVE INFORMATIONS; SOCIAL NETWORK ANALYSIS; USER EXPERIENCE; USER INTERVENTION; USER NEED; WEB-PAGE;

COMPUTER CRIME; ELECTRIC NETWORK ANALYSIS; HIGH LEVEL LANGUAGES; HTML; INTERNET; PERSONAL COMPUTERS; WEBSITES;

WEB BROWSERS;

EID: 79251596641     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2010.10.001     Document Type: Article

References (31)

1. Alexa The Web Information Company. Available at: http://www.alexa.com/. [accessed 18.04.10].
2. Arantius. Available at: http://trac.arantius.com/wiki/Extensions/ KarmaBlocker. [accessed 18.04.10].
3. D. Bradbury The metamorphosis of malware writers Computers & Security 25 2 2006 89 90
4. CallingID Add-ons for firefox: CallingID Link Advisor 1.0.0.37 Available at: https://addons.mozilla.org/en-US/firefox/addon/3421
5. Dagon D, Gu G, Lee C, Lee W. A taxonomy of botnet structures. In: Annual computer security applications conference (ACSAC); 2007.
6. W. Dormann, and J. Rafail Securing your web browser: US-CERT, United States computer emergency readiness team http://www.us-cert.gov/reading-room/ securing-browser/ 2008
7. M. Egele, P. Wurzinger, C. Kruegel, and E. Kirda Defending browsers against drive-by downloads: mitigating heap-spraying code injection attacks Detection of intrusions and malware, and vulnerability assessment vol. 5587 2009 Springer Berlin/Heidelberg pp. 88-106
8. Flashblock. Available at: http://my.opera.com/Lex1/blog/flashblock-for- opera-9. [Accessed 20.07.10].
9. S. Heron Working the botnet: how dynamic DNS is revitalising the zombie army Network Security 2007 1 2007 9 11
10. Inform action open source software a. NoScript: what is it? Available at: NoScript.net/ [accessed 18.04.10]
11. Inform action open source software b. NoScript features-usable security Available at: NoScript.net/ [accessed 18.04.10]
12. Kanich C, Kreibich C, Levchenko K, Enright B, Voelker GM, Paxson V, et al. Spamalytics: an empirical analysis of spam marketing conversion. In: ACM conference on computer and communications security; 2008.
13. E. Kirda, N. Jovanovic, C. Kruegel, and G. Vigna Client-side cross-site scripting protection Computers & Security 28 7 2009 592 604
14. V. Krebs The social life of routers Internet Protocol 3 2000 14 25
15. McAfee Site Advisor. Available at: http://www.siteadvisor.com/howitworks/ index.html. [accessed 18.04.10].
16. D. Moore, C. Shannon, D.J. Brown, G.M. Voelker, and S. Savage Inferring Internet denial-of-service activity ACM Transactions on Computer Systems (TOCS) Archive 24 2 2006 115 139
17. Mozilla Developer Center. Available at: https://developer.mozilla.org/en/ SpiderMonkey/Internals. [accessed 18.04.10].
18. Mozilla.org. What is SpiderMonkey? Available at: http://www.mozilla.org/ js/spidermonkey/ [accessed 18.04.10]
19. NetCraft. Available at: https://addons.mozilla.org/en-US/firefox/addon/ 1326. [accessed 18.04.10].
20. L. Page, S. Brin, R. Motwani, and T. Winograd The PageRank citation ranking: bringing order to the web Technical Report 1998 Stanford University
21. Policy Manager. Available at: http://addons.maxthon.com/US/post/25. [accessed 18.04.10].
22. Privoxy Available at: http://www.privoxy.org. [accessed 20.7.10].
23. Provos N, Mavrommatis P, Rajab MA, Monrose F. All your IFrames point to us. In: USENIX security symposium; 2008.
24. Provos N, McNamee D, Mavrommatis P, Wang K, Modadugu N. The ghost in the browser: analysis of web-based malware. In: Proceedings of the first USENIX workshop on hot topics in botnets (HotBots'07); 2007.
25. QuickJava. Available at: https://addons.mozilla.org/en-US/firefox/addon/ 1237. [accessed 18.04.10].
26. Request Policy. Available at: http://www.requestpolicy.com/. [accessed 18.04.10].
27. J. Samuel, and B. Zhang RequestPolicy: increasing web browsing privacy through control of cross-site requests Privacy enhancing technologies vol. 5672 2009 Springer Berlin/Heidelberg pp. 128-142
28. Virus Total. Available at: http://www.virustotal.com/. [accessed 18.04.10].
29. S. Wasserman, and K. Faust Social networks analysis: methods and applications 1994 Cambridge University Press Cambridge
30. WOT Services. Available at: https://addons.mozilla.org/en-US/firefox/ addon/3456. [accessed 18.04.10].
31. Zone Manager. Available at: http://addons.maxthon.com/en-US/post/1303. [accessed 18.04.10].