Scribd
Upload
26 views

Lecture 5: Modules 5.1-5.6 Web Client Security CSE 628/628A: Sandeep K. Shukla Indian Institute of Technology Kanpur

This document summarizes a lecture on web client security that covers 6 modules: 1) the web security landscape, 2) definitions and threat models, 3) HTTP and content rendering, 4) browser isolation, 5) the security interface, and 6) cookies, frames, and frame busting. It acknowledges contributions from researchers and provides a graph showing trends in reported web vulnerabilities over time, with a peak in cross-site scripting vulnerabilities.

Uploaded by

Harpreet Singh
Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
26 views

Lecture 5: Modules 5.1-5.6 Web Client Security CSE 628/628A: Sandeep K. Shukla Indian Institute of Technology Kanpur

This document summarizes a lecture on web client security that covers 6 modules: 1) the web security landscape, 2) definitions and threat models, 3) HTTP and content rendering, 4) browser isolation, 5) the security interface, and 6) cookies, frames, and frame busting. It acknowledges contributions from researchers and provides a graph showing trends in reported web vulnerabilities over time, with a peak in cross-site scripting vulnerabilities.

Uploaded by

Harpreet Singh
Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 11

Lecture 5: Modules 5.1-5.

6
Web Client Security
CSE 628/628A
Sandeep K. Shukla
Indian Institute of Technology Kanpur
Acknowledgements
Dan Boneh (Stanford University)
John C. Mitchell (Stanford University)
Nicolai Zeldovich (MIT)
Jungmin Park (Virginia Tech)
Patrick Schaumont (Virginia Tech)
C. Edward Chow
Arun Hodigere
Web Resources
Lecture 5: Web Client
Security
Total 6 Modules on Web Client Security
Module 5.1: Web Security Landscape
Module 5.2: Web Security Definitions, Goals and
Threat Models
Module 5.3: HTTP & Content Rendering
Module 5.4: Browser Isolation
Module 5.5: Security Interface
Module 5.6: Cookies, Frames and Frame Busting
Module 5.1: Web Security
Landscape
What are the trends?
Web vs System
vulnerabilities
XSS peak

Decline in % web vulns since 2009


49% in 2010 -> 37% in 2011.
Big decline in SQL Injection vulnerabilities
Reported Web Vulnerabilities"In the Wild"

Data from aggregator and validator of NVD-reported vulnerabilities


Web application vulnerabilities

You might also like