#	Pagina
attuale pagina	/open-h2020/projects/214362/index.html

Opendata, web and dolomites

Browsec SIGNED

Foundations and Tools for Client-Side Web Security

Total Cost €

EC-Contrib. €

Partnership

Views

Browsec project word cloud

Explore the words cloud of the Browsec project. It provides you a very rough idea of what is the project "Browsec" about.

client effort malicious surface rigorous engineering lightweight reliably innovative checked multidisciplinary foundations enforcing secure browser tool rapid extension practical disciplines efforts machine gigantic javascript advancements proofs semantics holistic themselves expose blackbox shows software intercepts unfortunately provably attack dangerous infeasible monitoring hence verification worthwhile demonstrates provides accompanied inputs crafted core vulnerable expensive tools requiring sound breakthrough backed prevent web first lack despite technologies dynamic theoretical delivering enforcement laying constantly solid technique guarantees code flows treats maliciously security hinders protect outputs nature easily attacks lies browsec confronted

Project "Browsec" data sheet

The following table provides information about the project.

Coordinator	TECHNISCHE UNIVERSITAET WIEN Organization address address: KARLSPLATZ 13 city: WIEN postcode: 1040 website: www.tuwien.ac.at contact info title: n.a. name: n.a. surname: n.a. function: n.a. email: n.a. telephone: n.a. fax: n.a.
Coordinator Country	Austria [AT]
Total cost	1˙990˙000 €
EC max contribution	1˙990˙000 € (100%)
Programme	1. H2020-EU.1.1. (EXCELLENT SCIENCE - European Research Council (ERC))
Code Call	ERC-2017-COG
Funding Scheme	ERC-COG
Starting year	2018
Duration (year-month-day)	from 2018-06-01 to 2023-05-31

Partnership

Take a look of project's partnership.

#	participants	country	role	EC contrib. [€]
1	TECHNISCHE UNIVERSITAET WIEN TECHNISCHE UNIVERSITAET WIEN Organization address address: KARLSPLATZ 13 city: WIEN postcode: 1040 website: www.tuwien.ac.at contact info title: n.a. name: n.a. surname: n.a. function: n.a. email: n.a. telephone: n.a. fax: n.a.	AT (WIEN)	coordinator	1˙990˙000.00

Map

Project objective

The constantly increasing number of attacks on web applications shows how their rapid development has not been accompanied by adequate security foundations and demonstrates the lack of solid security enforcement tools. Indeed, web applications expose a gigantic attack surface, which hinders a rigorous understanding and enforcement of security properties. Hence, despite the worthwhile efforts to design secure web applications, users for a while will be confronted with vulnerable, or maliciously crafted, code. Unfortunately, end users have no way at present to reliably protect themselves from malicious applications.

BROWSEC will develop a holistic approach to client-side web security, laying its theoretical foundations and developing innovative security enforcement technologies. In particular, BROWSEC will deliver the first client-side tool to secure web applications that is practical, in that it is implemented as an extension and can thus be easily deployed at large, and also provably sound, i.e., backed up by machine-checked proofs that the tool provides end users with the required security guarantees. At the core of the proposal lies a novel monitoring technique, which treats the browser as a blackbox and intercepts its inputs and outputs in order to prevent dangerous information flows. With this lightweight monitoring approach, we aim at enforcing strong security properties without requiring any expensive and, given the dynamic nature of web applications, statically infeasible program analysis.

BROWSEC is thus a multidisciplinary research effort, promising practical impact and delivering breakthrough advancements in various disciplines, such as web security, JavaScript semantics, software engineering, and program verification.

Deliverables

List of deliverables.
Data Management Plan	Open Research Data Pilot	2020-02-13 12:31:45

Take a look to the deliverables list in detail: detailed list of Browsec deliverables.

Publications

List of publications.
year	authors and title	journal	last update
2019	Matteo Maffei, Giulio Malavolta, Manuel Reinert, Dominique SchrÃ¶der Group ORAM for privacy and access control in outsourced personal records published pages: 1-47, ISSN: 0926-227X, DOI: 10.3233/jcs-171030	Journal of Computer Security 27/1	2020-02-13
2018	Dominic Deuber, Matteo Maffei, Giulio Malavolta, Max Rabkin, Dominique SchrÃ¶der, Mark Simkin Functional Credentials published pages: 64-84, ISSN: 2299-0984, DOI: 10.1515/popets-2018-0013	Proceedings on Privacy Enhancing Technologies 2018/2	2020-02-13

Are you the coordinator (or a participant) of this project? Plaese send me more information about the "BROWSEC" project.

For instance: the website url (it has not provided by EU-opendata yet), the logo, a more detailed description of the project (in plain text as a rtf file or a word file), some pictures (as picture files, not embedded into any word file), twitter account, linkedin page, etc.

Send me an email (fabio@fabiodisconzi.com) and I put them in your project's page as son as possible.

Thanks. And then put a link of this page into your project's website.

The information about "BROWSEC" are provided by the European Opendata Portal: CORDIS opendata.