Adversaries are often able to penetrate networks and compromise systems by exploiting
vulnerabilities in people and systems. The key to the success of these attacks is information …

Information exchange has become increasingly faster and efficient through the use of recent
technological advances, such as instant messaging and social media platforms …

Browser extensions are remarkably popular, with one in three Firefox users running at least
one extension. Although well-intentioned, extension developers are often not security …

We present Hulk, a dynamic analysis system that detects malicious behavior in browser
extensions by monitoring their execution and corresponding network activity. Hulk elicits …

JavaScript-based browser extensions (JSEs) enhance the core functionality of Web
browsers by improving their look and feel, and are widely available for commodity browsers …

Malvertising is a malicious activity that leverages advertising to distribute various forms of
malware. Because advertising is the key revenue generator for numerous Internet …

Popup blocking, form filling, and many other features of modern web browsers were first
introduced as third-party extensions. New extensions continue to enrich browsers in …

All major web browsers support browser extensions to add new features and extend their
functionalities. Nevertheless, browser extensions have been the target of several attacks …

The widely popular browser extensions now become one of the most commonly used
malware attack vectors. The Google Chrome browser, which implements the principles of …

We introduce a novel approach to implementing a browser-based tool for web users to
protect their privacy. We propose to monitor the behaviors of JavaScript code within a …