Security Challenges in an Increasingly Tangled Web
Security Challenges in an Increasingly Tangled Web
复制标题
DOI：
10.1145/3038912.3052686
复制
发表时间：
2017-04
期刊：
影响因子：
--
通讯作者：
Deepak Kumar;Zane Ma;Zakir Durumeric;Ariana Mirian;Joshua Mason;J. A. Halderman;Michael Bailey
中科院分区：
文献类型：
--
作者：
Deepak Kumar;Zane Ma;Zakir Durumeric;Ariana Mirian;Joshua Mason;J. A. Halderman;Michael Bailey
在过去的20年中，网站变得越来越复杂和相互联系。在2016年，只有一定数量的站点是无依赖性的，超过90％的站点依赖外部内容。在本文中，我们研究了网络依赖的当前状态，并探讨了与越来越依赖外部服务有关的两个安全挑战：（1）与服务未知，隐含信任的第三方内容相关的扩展攻击表面，以及（2）如何增加的外部依赖性集对HTTPS的采用产生了影响。我们希望，通过阐明这些问题，我们可以鼓励开发人员考虑与服务第三方内容和服务提供商促使服务提供商更广泛地部署HTTP相关的安全风险。
Over the past 20 years, websites have grown increasingly complex and interconnected. In 2016, only a negligible number of sites are dependency free, and over 90% of sites rely on external content. In this paper, we investigate the current state of web dependencies and explore two security challenges associated with the increasing reliance on external services: (1) the expanded attack surface associated with serving unknown, implicitly trusted third-party content, and (2) how the increased set of external dependencies impacts HTTPS adoption. We hope that by shedding light on these issues, we can encourage developers to consider the security risks associated with serving third-party content and prompt service providers to more widely deploy HTTPS.