Browser extension-based man-in-the-browser attacks against Ajax applications with countermeasures



: Sampsa Rauti, Ville Leppänen

: Boris Rachev, Angel Smrikarov

: International Conference on Computer Systems and Technologies

: New York, NY

: 2012

: CompSysTech '12: Proceedings of the 13th International Conference on Computer Systems and Technologies

: 251

: 258

: 978-1-4503-1193-9

DOI: https://doi.org/10.1145/2383276.2383314

: https://research.utu.fi/converis/portal/detail/Publication/3091546


As the web pages today rely on Ajax and JavaScript, a larger attack surface becomes available. This paper presents in detail several different man-in-the-browser attacks against Ajax applications. We implemented browser extensions for Mozilla Firefox to demonstrate these attacks and their effectiveness. Some countermeasures to mitigate the problem are also considered. We conclude that man-in-the-browser attacks are a serious threat to online applications and there are only partial countermeasures to alleviate the problem.

Last updated on 2024-26-11 at 21:30