Secure Input for Web Applications

The web is an indispensable part of our lives. Every day, millions of users purchase items, transfer money, retrieve information and communicate over the web. Although the web is convenient for many users because it provides anytime, anywhere access to information and services, at the same time, it has also become a prime target for miscreants who attack unsuspecting web users with the aim of making an easy profit. The last years have shown a significant rise in the number of web-based attacks, highlighting the importance of techniques and tools for increasing the security of web applications. An important web security research problem is how to enable a user on an untrusted platform (e.g., a computer that has been compromised by malware) to securely transmit information to a web application. Solutions that have been proposed to date are mostly hardware-based and require (often expensive) peripheral devices such as smartcard readers and chip cards. In this paper, we discuss some com...

• Type: Conference
• Year: 2007
• Where: ACSAC
• Authors: Martin Szydlowski, Christopher Kruegel, Engin Kirda
• Keywords: ACSAC 2007, Security Privacy, Unsuspecting Web Users, Users Purchase Items, Web Applications