@inproceedings{b7182316c8354d689b07f79076364204,
title = "FlowFox: A web browser with flexible and precise information flow control",
abstract = "We present FlowFox, the first fully functional web browser that implements a precise and general information flow control mechanism for web scripts based on the technique of secure multi-execution. We demonstrate how FlowFox subsumes many ad-hoc script containment countermeasures developed over the last years. We also show that FlowFox is compatible with the current web, by investigating its behavior on the Alexa top-500 web sites, many of which make intricate use of JavaScript. The performance and memory cost of FlowFox is substantial (a performance cost of around 20\% on macro benchmarks for a simple two level policy), but not prohibitive. Our prototype implementation shows that information flow enforcement based on secure multi-execution can be implemented in full-scale browsers. It can support powerful, yet precise policies refining the same-origin-policy in a way that is compatible with existing websites.",
keywords = "Information flow, Web browser architecture, Web security",
author = "\{De Groef\}, Willem and Dominique Devriese and Nick Nikiforakis and Frank Piessens",
year = "2012",
doi = "10.1145/2382196.2382275",
language = "English",
isbn = "9781450316507",
series = "Proceedings of the ACM Conference on Computer and Communications Security",
pages = "748--759",
booktitle = "CCS'12 - Proceedings of the 2012 ACM Conference on Computer and Communications Security",
note = "2012 ACM Conference on Computer and Communications Security, CCS 2012 ; Conference date: 16-10-2012 Through 18-10-2012",
}