Collected research
Arcanum: Detecting and Evaluating the Privacy Risks of Browser Extensions on Web Pages and Web Content
Presents Arcanum, a dynamic taint-tracking system for Chrome extensions that follows user content out of web pages, defining taint sources and sinks researchers can attach to page elements at runtime under current extension and JavaScript APIs. Deployed against every functional extension in the Chrome Web Store across seven sensitive sites, it observed hundreds of extensions automatically extracting user content from within pages, affecting millions of users.
Record
- Researcher
- Qinge Xie, Manoj Vignesh Kasi Murali, Paul Pearce and Frank Li
- Published by
- usenix.org
- Topic
- Browser
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Qinge Xie, Manoj Vignesh Kasi Murali, Paul Pearce and Frank Li, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .