Imperial College London
Portrait Picture

DrSergioMaffeis

Faculty of Engineering, Department of Computing

Senior Lecturer
 
 
 
//

Contact

 

+44 (0)20 7594 8390sergio.maffeis Website

 
 
//

Location

 

441Huxley BuildingSouth Kensington Campus

//

Summary

 

Publications

Citation

BibTex format

@article{Bhargavan:2014:10.1007/978-3-319-10082-1_4,
author = {Bhargavan, K and Delignat-Lavaud, A and Maffeis, S},
doi = {10.1007/978-3-319-10082-1_4},
journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},
pages = {88--123},
title = {Defensive javascript building and verifying secure web components},
url = {http://dx.doi.org/10.1007/978-3-319-10082-1_4},
volume = {8604},
year = {2014}
}
Download

RIS format (EndNote, RefMan)

TY  - JOUR
AB  - Defensive JavaScript (DJS) is a typed subset of JavaScript that guarantees that the functional behavior of a program cannot be tampered with even if it is loaded by and executed within a malicious environment under the control of the attacker. As such, DJS is ideal for writing JavaScript security components, such as bookmarklets, single sign-on widgets, and cryptographic libraries, that may be loaded within untrusted web pages alongside unknown scripts from arbitrary third parties. We present a tutorial of the DJS language along with motivations for its design. We show how to program security components in DJS, how to verify their defensiveness using the DJS typechecker, and how to analyze their security properties automatically using ProVerif.
AU  - Bhargavan,K
AU  - Delignat-Lavaud,A
AU  - Maffeis,S
DO  - 10.1007/978-3-319-10082-1_4
EP  - 123
PY  - 2014///
SN  - 0302-9743
SP  - 88
TI  - Defensive javascript building and verifying secure web components
T2  - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
UR  - http://dx.doi.org/10.1007/978-3-319-10082-1_4
VL  - 8604
ER  -
Download