SPIDES applies information-flow control to primitive browser actions rather than simply reinstating the web’s Same-Origin Policy.
Fine-grained flow controls block browser-agent attacks without restoring origin walls
SPIDES tracks the confidentiality and trustworthiness of individual page elements, then permits browser actions only when resulting information flows comply with policy.
Big Tech
Egor Zverev · Juhee Kim · Leon Trampert · Boris Köpf · Aashish Kolluri · Shruti Tople · +1 more
ISTA · Microsoft · CISPA Helmholtz Center for Information Security
Research Digest··3 min read
Thread:Agent Security & Attacks
Zverev et al.
What it released
Code
§