Ensuring the Integrity of Outsourced Web Scripts

Josselin Mignerey, Cyrille Mucchietto, Jean-Baptiste Orfila

2020

Abstract

Dynamic web browsing, supported by web scripting languages such as JavaScript, has quickly conquered the Internet. In spite of the obvious advantages they offer, they have also opened many security flaws for the user browsing. The browser starts by retrieving some external scripts, potentially distributed over many servers. In terms of security, this process is extremely sensitive, therefore many solutions have been introduced to secure web browsing. Unfortunately, they mostly rely on server side actions. Hence, a malicious server is able to compromise the client by modifying the security policy and the scripts sent. We propose an efficient solution, which does not require any trust in the servers, to ensure the integrity of distributed web scripts. Our protocols rely on simple cryptographic tools, such as digital signature schemes and hash functions. In the end, we provide a proven secure, user-friendly and easy-to-deploy solution which only adds a small latency in the end-user browsing.

Paper Citation

in Harvard Style

Mignerey J., Mucchietto C. and Orfila J. (2020). Ensuring the Integrity of Outsourced Web Scripts.In Proceedings of the 17th International Joint Conference on e-Business and Telecommunications - Volume 3: SECRYPT, ISBN 978-989-758-446-6, pages 155-166. DOI: 10.5220/0009829401550166

in Bibtex Style

@conference{secrypt20,
author={Josselin Mignerey and Cyrille Mucchietto and Jean-Baptiste Orfila},
title={Ensuring the Integrity of Outsourced Web Scripts},
booktitle={Proceedings of the 17th International Joint Conference on e-Business and Telecommunications - Volume 3: SECRYPT,},
year={2020},
pages={155-166},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0009829401550166},
isbn={978-989-758-446-6},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 17th International Joint Conference on e-Business and Telecommunications - Volume 3: SECRYPT,
TI - Ensuring the Integrity of Outsourced Web Scripts
SN - 978-989-758-446-6
AU - Mignerey J.
AU - Mucchietto C.
AU - Orfila J.
PY - 2020
SP - 155
EP - 166
DO - 10.5220/0009829401550166