AdSentry: Comprehensive and Flexible Confinement of JavaScript-Based Advertisements

Date Added: Dec 2011
Format: PDF

Internet advertising is one of the most popular online business models. JavaScript-based advertisements (ads) are often directly embedded in a web publisher's page to display ads relevant to users (e.g., by checking the user's browser environment and page content). However, as third-party code, the ads pose a significant threat to user privacy. Worse, malicious ads can exploit browser vulnerabilities to compromise users' machines and install malware. To protect users from these threats, the authors propose AdSentry, a comprehensive confinement solution for JavaScript-based advertisements. The crux of their approach is to use a shadow JavaScript engine to sandbox untrusted ads.