Safe Internet Browsing Using a Transparent Virtual Browser

Web browser has become a widely used platform for connecting and interacting people or organization with cyberspace.By using the web browser, we can share all the information, and now we can make transaction and pay our bills online.To users, they have to be careful when using internet and web browser to make all the transactions involved money as we know there are some vulnerabilities appear in web browser.This paper provides the discussion of the vulnerabilities appear in Firefox and Internet Explorer browser.It begins by providing an overview of web browser and describes what it is, how it is works, most popular web browser and common vulnerabilities found in web browser that can be used by hackers to attack the system.The paper then proposes some countermeasures to prevent the web browser from cyber attack.

Web browser is the most commonly used software to access the Internet. Any vulnerability in a popular web browser will compromise the security and privacy of its users. With the increasing complexity of modern web browsers, the attack surface of web browser increased dramatically and more vulnerabilities were introduced.

Purpose– This paper aims to report on research that tests the effectiveness of anti-phishing tools in detecting phishing attacks by conducting some real-time experiments using freshly hosted phishing sites. Almost all modern-day Web browsers and antivirus programs provide security indicators to mitigate the widespread problem of phishing on the Internet.Design/methodology/approach– The current work examines and evaluates the effectiveness of five popular Web browsers, two third-party phishing toolbar add-ons and seven popular antivirus programs in terms of their capability to detect locally hosted spoofed websites. The same tools have also been tested against fresh phishing sites hosted on Internet.Findings– The experiments yielded alarming results. Although the success rate against live phishing sites was encouraging, only 3 of the 14 tools tested could successfully detect a single spoofed website hosted locally.Originality/value– This work proposes the inclusion of domain name system server authentication and verification of name servers for a visiting website for all future anti-phishing toolbars. It also proposes that a Web browser should maintain a white list of websites that engage in online monetary transactions so that when a user requires to access any of these, the default protocol should always be HTTPS (Hypertext Transfer Protocol Secure), without which a Web browser should prevent the page from loading.

The worldwide Web has dramatically evolved in recent years. Web pages are dynamic, expressed by programs written in common programming languages given rise to sophisticated Web applications. Thus, Web browsers are almost operating systems, having to interpret/compile such programs and execute them. Although JavaScript is widely used to express dynamic Web pages, it has several shortcomings and performance inefficiencies. To overcome such limitations, major IT powerhouses are developing a new portable and size/load efficient language: WebAssembly.In this paper, we conduct the first systematic study on the energy and run-time performance of WebAssembly and JavaScript on the Web. We used micro-benchmarks and also real applications in order to have more realistic results. Preliminary results show that WebAssembly, while still in its infancy, is starting to already outperform JavaScript, with much more room to grow. A statistical analysis indicates that WebAssembly produces significant performance differences compared to JavaScript. However, these differences differ between micro-benchmarks and real-world benchmarks. Our results also show that WebAssembly improved energy efficiency by 30%, on average, and showed how different WebAssembly behaviour is among three popular Web Browsers: Google Chrome, Microsoft Edge, and Mozilla Firefox. Our findings indicate that WebAssembly is faster than JavaScript and even more energy-efficient. Additionally, our benchmarking framework is also available to allow further research and replication.

Toward a secure and usable cloud-based password manager for web browsers

Regional economic development is the main driving force of economic development in the world, and intellectual property information is the strategic resource in the durative and rapid development of regional economy. Based on analyzing the strategic position of intellectual property information, the article defines the concept of regional intellectual property information platform (RIPIP) and elaborates its connotation. Then, it dissects the main service function of RIPIP deeply, puts forward an infrastructure of RIPIP with four levels and elaborates its construction mechanism further .

Web browsers are very commonly used softwares and the modern ones provide various interactive contents from World Wide Web (WWW). Browsers internally use JavaScript engines to offer these functionalities. Most of the websites specifies only the browser version as prerequisites but these browsers in turn depend on the underlying hardware. The benchmark tests performed on the popular browsers revealed the strength and weakness and its hardware dependency. It also calls for websites which provide complex contents to specified a recommended hardware

Scalability, flexibility and integration capability of cloud-based Customer Relationship Management (CRM) solutions like Salesforce have become significant to the operations of the enterprise. Nonetheless, centralized cloud nature of CRM systems also creates serious concerns to do with data security, privacy, trust and regulatory compliance especially in a multi-tenancy scenario where sensitive customer information are often accessed and shared. The current security measures are largely based on controls that are located at the perimeter and are also based on static access policy-based controls that are not adequate to handle insider threats, tampering of data, and advanced persistent attacks. To handle these issues, this paper introduces a hybrid credit model of Blockchain and Artificial Intelligence (AI) based on cloud computing to manage CRM information in Salesforce. The suggested framework will combine a permissioned blockchain layer to facilitate data integrity, immutability, transparent auditing, and decentralized trust and an AI-provided security layer will be an intelligent anomaly detector, behavioral analytics, and predictive access control. The multi-layer architecture is developed and deployed, which includes smart contracts to handle a fine-grained access policy and machine learning algorithms to detect threats in real time. The metrics used to determine the evaluation of the model include security, performance, and scalability of the model such as data integrity verification time, access latency, throughput and detector accuracy. Experimental evidence by showing improved data security and trust using the proposed hybrid approach without having a prohibitive performance overhead and allowing it to scale to the size of an enterprise CRM deployment. The most valuable contribution is that the paper introduces an effective and scalable security model that integrates blockchain and AI in a chain of strength cloud-based CRM systems, which can be seen as a strong solution to reliable, intelligent, and secure CRM data management.

Insurance systems have become cloud-native, gaining importance in the modern insurance business as resilient, scalable and flexible systems. Nonetheless, migration to cloud computing has increased security concerns, especially over sensitive customer information and financial data. Data masking techniques are crucial for securing Personally Identifiable Information (PII), Payment Card Information (PCI), and health-related data that must comply with global regulatory standards, such as GDPR, HIPAA, and PCI-DSS. This paper explores the potential of secure data masking in cloud-native insurance ecosystems by integrating DevSecOps practices and cloud security frameworks. The existing articles extensively examine the concepts of Static Data Masking (SDM), Dynamic Data Masking (DDM), and tokenization, as well as encryption-based masking, and present an analysis of appropriateness in an insurance scenario. In addition, we also discuss how data masking can be implemented in a secure way by deploying microservices in containers, using Kubernetes as the orchestration layer, and deploying continuous compliance pipelines. Experimental findings demonstrate how policy tradeoffs can be made between data usability, masking performance, and achieved assurance levels, providing guidelines on how data masking can be implemented in multi-cloud insurance applications

We explore the space of open source systems and their user communities by examining the development artifact histories of two popular web browsers -- Firefox and Chrome -- as well as usage data. By examining the data and addressing a number of research questions, two very different profiles emerge: Firefox, as the older and established system, with long product version cycles but short bug fix cycles, and a user base that is slow to adopt newer versions; and Chrome, as the new and fast evolving system, with short version cycles, longer bug fix cycles, and a user base that very quickly adopts new versions as they become available (due largely to Chrome's mandatory automatic updates).

A web browser is an application that comes bundled with every consumer operating system, including both desktop and mobile platforms. A modern web browser is complex software that has access to system-level features, includes various plugins and requires the availability of an Internet connection. Like any multifaceted software products, web browsers are prone to numerous vulnerabilities. Exploitation of these vulnerabilities can result in destructive consequences ranging from identity theft to network infrastructure damage. BeEF, the Browser Exploitation Framework, allows taking advantage of these vulnerabilities to launch a diverse range of readily available attacks from within the browser context. Existing defensive approaches aimed at hardening network perimeters and detecting common threats based on traffic analysis have not been found successful in the context of BeEF detection. This paper presents a proof-of-concept approach to BeEF detection in its own operating environment – the web browser – based on global context monitoring, abstract syntax tree fingerprinting and real-time network traffic analysis.

Desktop client applications interact with both local and remote resources. This is both a benefit in terms of the rich features desktop clients can provide, but also a security risk. Due to their high connectivity, desktop clients can leave a user's machine vulnerable to viruses, malicious plug-ins, and scripts. Aspect-Oriented Software Development can be used to address security concerns in software in a modular fashion. However, most existing research focuses on the protection of server-side resources. In this paper we introduce an aspect-oriented mechanism, Authority Aspects, to enforce the Principle of Least Privilege on desktop clients. This helps to ensure that legitimate resource access is allowed and illegitimate access is blocked. We present a case study applying our approach on two desktop applications: an RSS feed aggregator and a Web browser.

Protecting sensitive information while preserving the share ability and usability of data is becoming increasingly important in the outsourced business process industry. Particularly in the context of call-centers a lot of customer related sensitive information is stored in audio recordings. In this work, we address the problem of protecting sensitive customer information in audio recordings and Automatic Speech Recognition (ASR) transcripts. The high word error rates, spontaneous nature of communication and the variability in agent-customer interaction makes it harder and expensive to craft rules or build annotators to detect sensitive information. In this paper we propose a semi supervised method to model sensitive information as a directed graph which is automatically generated from ASR transcripts. Vocabularies specific to the nodes are generated using features of context sensitive clusters. The direction and weight of the edge capture the ordering and timing constraints respectively for these features. These constraints are learnt from the time stamps associated with ASR transcripts. The effectiveness of this approach is demonstrated by applying it to the problem of detecting and locating credit card transaction in real life conversations between agents and customer of a call center.

E-commerce, e-mail, e-greeting, e-this, and e-that everywhere you turn there is a new "e" word for an internet or Web application. We, at the Cleveland Clinic Foundation, have been "e-nlightened" and will discuss in this report the implementation of a web-based radiology information system (RIS) in our radiology division or "e-radiology" division. The application, IDXRad Version 10.0 from IDX Corp, Burlington, VT, is in use at the Cleveland Clinic Foundation and has both intranet (for use in Radiology) and internet (referring physician viewing) modules. We will concentrate on the features of using a web browser for the application's front-end, including easy prototyping for screen review, easier mock-ups of demonstrations by vendors and developers, and easier training as more people become web-addicted. Project communication can be facilitated with an internal project web page, and use of the web browser can accommodate quicker turnaround of software upgrades as the software code is centrally located. Compared with other technologies, including client/server, there is a smaller roll out cost when using a standard web browser. However, the new technology requires a change and changes are never implemented without challenges. A seasoned technologist using a legacy system can enter data quicker using function keys than using a graphical user interface and pointing and clicking through a series of pop-up windows. Also, effective use of a web browser depends on intuitive design for it to be easily implemented and accepted by the user. Some software packages will not work on both of the popular web browsers and then are tailored to specific release levels. As computer-based patient records become a standard, patient confidentiality must be enforced. The technical design and application security features that support the web-based software package will be discussed. Also web technologies have their own implementation issues.

In the current circumstance, e-commerce through an online banking system plays a significant role. Customers may either buy goods from E-Commerce websites or use online banking to move money to other accounts. When a user participates in these types of behaviors, their sensitive information is sent to an untrustworthy network. As a consequence, when transmitting data from an internal browser to an external E-commerce web server using the cryptographic protocol SSL/TLS, the E-commerce web server ensures the security of the user’s data. The user should be pleased with the confidentiality, authentication, and authenticity properties of the SSL/TLS on both the user’s web browser and the remote E-commerce web server. E-Commerce web servers should choose the best SSL/TLS cipher suites for negotiating the user in order to attain such optimistic scenarios, as the cipher suite used in SSL/TLS plays an important role in securing E-Commerce web servers. The paper primarily focuses on analyzing the SSL/TLS cipher and elliptic curves. The paper also recommends the best elliptic curve cipher suites for E-Commerce and online banking servers, based on their power consumption, handshake execution time, and key exchange and signature verification time.