Hi,
I am Himanshu Sharma and will be presenting this paper in class on Monday 03/02.
Purpose of the paper: Questioning and Detection of webpage integrity on the way from server to client browser, by using Web tripwires.
Web Tripwires: Client side JavaScript code that detects any change in the HTML Source Code.
It addresses the following issues:
- Why we need web tripwires.
- Who can cause the changes to web pages in transit.
- Purpose behind those changes.
- Bugs/ Vulnerabilities generated because of the changes
The paper proposes 5 web tripwire designs based on JavaScript with their pros and cons. It also compares the costs associated between tripwires and HTTPS.
The researchers have also published an open source toolkit for publishers to use with their websites, with the ability to make certain policy decisions. It uses the best of the 5 techniques implemented by the researchers - ” XHR on Self”.
The paper’s language is easy and descriptive and i hope the discussion on Monday will be beneficial for all in understanding it.
No comments yet.