The Sequel of HTTP Headers - Advanced Security Capabilities

Uloženo v:
Podrobná bibliografie
Název: The Sequel of HTTP Headers - Advanced Security Capabilities
Autoři: Michael Schneider, orcid:0000-0003-0772-
Přispěvatelé: Marc Ruef
Informace o vydavateli: Zenodo
Rok vydání: 2018
Sbírka: Zenodo
Témata: Ajax, Andrea Hauser, Basel, Browser, Firefox, GitHub, Google, Hardening, HTML, HTTP, Javascript, Master, Microsoft, Penetration Test, Policy, Report, Request, Research, Shop, Tool, Twitter, West
Popis: Subresource Integrity protects embedded objects from third parties being changed. Feature Policy allows monitoring of browser features. Origin Policy provides central management of HTTP headers. Applications can be isolated from each other in the same origin by means of suborigins. ; This paper was written in 2018 as part of a research project at scip AG, Switzerland. It was initially published online at https://www.scip.ch/en/?labs.20180809 and is available in English and German. Providing our clients with innovative research for the information technology of the future is an essential part of our company culture.
Druh dokumentu: article in journal/newspaper
Jazyk: English
Relation: https://zenodo.org/records/3521919; oai:zenodo.org:3521919; https://doi.org/10.5281/zenodo.3521919
DOI: 10.5281/zenodo.3521919
Dostupnost: https://doi.org/10.5281/zenodo.3521919
https://zenodo.org/records/3521919
Rights: Creative Commons Attribution 4.0 International ; cc-by-4.0 ; https://creativecommons.org/licenses/by/4.0/legalcode
Přístupové číslo: edsbas.BCFB0D54
Databáze: BASE
Popis
Abstrakt:Subresource Integrity protects embedded objects from third parties being changed. Feature Policy allows monitoring of browser features. Origin Policy provides central management of HTTP headers. Applications can be isolated from each other in the same origin by means of suborigins. ; This paper was written in 2018 as part of a research project at scip AG, Switzerland. It was initially published online at https://www.scip.ch/en/?labs.20180809 and is available in English and German. Providing our clients with innovative research for the information technology of the future is an essential part of our company culture.
DOI:10.5281/zenodo.3521919