While in its early days, the Web was mostly static, it has organically grown into a full-fledged
technology stack. This evolution has not followed a security blueprint, resulting in many …

The postMessage mechanism in HTML5 enables Web content from different origins to
communicate with each other, thus relaxing the same origin policy. It is especially popular in …

This paper presents NetSieve, a system that aims to do automated problem inference from
network trouble tickets. Network trouble tickets are diaries comprising fixed fields and free …

Web browsers mediate access to valuable private data in domains ranging from health care
to banking. Despite this critical role, attackers routinely exploit browser vulnerabilities to …

Modern Web sites frequently generate JavaScript on-the-fly via server-side scripting,
incorporating personalized user data in the process. In general, cross-domain access to …

Managing a network requires support for multiple concurrent tasks, from routing and traffic
monitoring, to access control and server load balancing. Software-Defined Networking …

The last fifteen years have transformed the Web in ways that would seem unimaginable to
anyone of the" few" Internet users of the year 1995 [8]. What began as a simple set of …

We envision a future where Web, mobile, and desktop applications are delivered as
isolated, complete software stacks to a minimal, secure client host. This shift imbues app …

Mixed Flash and JavaScript content has become increasingly prevalent; its purveyance of
dynamic features unique to each platform has popularized it for myriad web development …

Since the early days of Netscape, browser vendors and web security researchers have
restricted out-going data based on its destination. The security argument accompanying …