I Spy with My Little Eye: Analysis and Detection of Spying Browser Extensions — mentioned by ThePhysicist

Mon, 31 Jul 2017 14:53:18 GMT

We were only able to name one extension (the one named in the presentation), as we did not have conclusive proof that data from other extensions which we found to be suspicious ended up in the data set (as the access to incremental data was limited to a short time period): We developed a sandboxing framework to test whether Chrome extensions send URL data to a third party using a MITM proxy, the code is available on Github: https://github.com/adewes/chrome-extension-behavior-analysis There's also a large study on this that uses a very similar technique: https://arxiv.org/pdf/1612.00766.pdf In…

Paper and discussion history. A mention is not an endorsement.

I Spy with My Little Eye: Analysis and Detection of Spying Browser Extensions · HackerPapers discussions

I Spy with My Little Eye: Analysis and Detection of Spying Browser Extensions — mentioned by ThePhysicist