Security Assurance for Web Device APIs

Johnson, Maritza Lupe; Bellovin, Steven Michael

There are currently proposals for web access to devices. The security threats are obvious. We propose design principles intended to ensure that the user actually controls access, despite potential errors in judgment, tricky web pages, or flaws in browsers.



More About This Work

Academic Units
Computer Science
Published Here
April 22, 2010


Position paper for W3C Workshop on Security for Access to Device APIs from the Web, London, 10-11 December 2008.