Designing security policies and frameworks for web applications

Security policies;Web security;Web applications

Singh, Kapil ; Computing

University:Georgia Institute of Technology

Department:Computing

关键词: Security policies;    Web security;    Web applications;   

Others  :  https://smartech.gatech.edu/bitstream/1853/41122/1/singh_kapil_k_201108_phd.pdf

美国|英语

来源: SMARTech Repository

【 摘 要 】

The new developments behind Web 2.0 have increased the complexity of web systems making the task of securing these systems a challenging problem. As a result, end-to-end security for web access has been hindered by the limitations of current web security policies and by the lack of systems that enable effective enforcement of policies. The focus of this dissertation is on how new tools and frameworks may be designed to aid the protection of web systems by acting as policy specification and enforcement points. In particular, we develop a set of policies and frameworks for three web players--the user, the web browser and the web application--that determine the end-to-end security of web content. Our contributions include a framework for users to specify security policies, a platform to enforce user policies for third-party applications, a systematic analysis of browser policy issues, and a mechanism to provide improved end-to-end security/integrity guarantees.