Scientists from UCL, Stanford Engineering, Google, Chalmers and Mozilla Research have built a new system that protects Internet users’ privacy whilst increasing the flexibility for web developers to build web applications that combine data from different web sites, dramatically improving the safety of surfing the web.
The system, ‘Confinement with Origin Web Labels,’ or COWL, works with Mozilla’s Firefox and the open-source version of Google’s Chrome web browsers and prevents malicious code in a web site from leaking sensitive information to unauthorised parties, whilst allowing code in a web site to display content drawn from multiple web sites – an essential function for modern, feature-rich web applications.
Testing of COWL prototypes for the Chrome and Firefox web browsers shows the system provides strong security without perceptibly slowing the loading speed of web pages. Following its announcement today, COWL will be freely available for download and use on October 15 from http://cowl.ws. The team who developed it, including two PhD students from Stanford (working in collaboration with Mozilla Research) and a recently graduated PhD from UCL (now employed by Google), hope COWL will be widely adopted by web developers.
Currently, web users’ privacy can be compromised by malicious JavaScript code hidden in seemingly legitimate web sites. The web site’s operator may have incorporated code obtained elsewhere into his or her web site without realising that the code contains bugs or is malicious. Such code can access sensitive data within the same or other browser tabs, allowing unauthorised parties to obtain or modify data without the user’s knowledge.
The research team describe COWL in a paper published in the Proceedings of the 11th USENIX Symposium on Operating Systems Design and Implementation.
Co-author Professor Brad Karp (UCL Computer Science) said: “COWL achieves both privacy for the user and flexibility for the web application developer. Achieving both these aims, which are often in opposition in many system designs, is one of the central challenges in computer systems security research.
“The new system provides a property known as ‘confinement’ which has been known since the 1970s, but proven difficult to achieve in practical systems like web browsers. COWL confines JavaScript programs that run within the browser, such as in separate tabs. If a JavaScript program embedded within one web site reads information provided by another web site – legitimately or otherwise – COWL permits the data to be shared, but thereafter restricts the application receiving the information from communicating it to unauthorised parties. As a result, the site that shares data maintains control over it, even after sharing the information within the browser.”
The Latest on: Web privacy system
[google_news title=”” keyword=”web privacy system” num_posts=”10″ blurb_length=”0″ show_thumb=”left”]
via Google News
The Latest on: Web privacy system
- Hospital Information System Market 2024 Trends: Projected to Grow at a CAGR of 11.0% from 2021 to 2030, Reporton May 10, 2024 at 1:30 am
Hospital Information System Market StatisticsThe global hospital information system market was valued at $ 15,482.30 Million in 2020 and is projected to reach $ 44,329.80 Million by 2030 registering a ...
- Best web browser of 2024on May 6, 2024 at 1:40 am
For example, if privacy ... web browsers on factors like interface, speed, security, and other accessibility features. We evaluated their customizability, cross-platform support, and system ...
- This Linux Distro Is Focused on Maximum Privacy and Anonymity, Heres How to Use Iton May 4, 2024 at 9:00 am
While Tails is effective, user error can expose you, necessitating caution and awareness. Is online privacy a lost cause? Tails ...
- As White Castle pays up, the Legislature considers tweaking Illinois' biometric privacy lawon May 1, 2024 at 3:46 am
Businesses are watching, as lawmakers consider easing the threat of "annihilative" damages hobbling companies that violate the Biometric Information Privacy Act.
- iOS 18—New Apple Overhaul Reveals Exciting iPhone AI Privacy Featureon May 1, 2024 at 12:31 am
Apple’s iOS 18 software includes a cool new AI-based privacy feature as part of an overhaul of the iPhone maker's Safari browser.
- OpenAI Hit With Privacy Complaint Over ChatGPT Hallucinationson April 29, 2024 at 4:06 pm
"If a system cannot produce accurate and transparent results, it cannot be used to generate data about individuals" says a lawyer about ChatGPT.
- Watchdog reveals lingering Google Privacy Sandbox worrieson April 29, 2024 at 3:15 am
The UK Competition and Markets Authority (CMA) still has privacy and competition concerns about Google's Privacy Sandbox advertising toolkit, which explains why the ad giant recently again delayed its ...
- Best web browsers with built in VPN: Boost online privacyon April 28, 2024 at 9:32 pm
A VPN-equipped browser is a web browser that has been developed with user privacy in mind ... and will provide system-wide VPN protection for all your apps and devices. That means you can use ...
- Google is updating Android TVs to fix a big Gmail privacy problemon April 25, 2024 at 2:39 pm
Google is working on a fix to block crafty individuals from gaining access to the emails of accounts logged in to some Android TV units. The Android TV operating system, which is preloaded on many ...
- The best web browsers for 2024on April 23, 2024 at 5:00 pm
Some Firefox strengths include privacy protections with SmartBlock ... information about you and your device. The operating system, the web browser, all installed extensions, your time zone ...
via Bing News