FlowFox: A Web Browser with Flexible and Precise Information Flow Control
The authors present FlowFox, the first fully functional web browser that implements a precise and general information flow control mechanism for web scripts based on the technique of secure multi-execution. They demonstrate how FlowFox subsumes many ad-hoc script containment countermeasures developed over the last years. They also show that FlowFox is compatible with the current web, by investigating its behavior on the Alexa top-500 web sites, many of which make intricate use of JavaScript. The performance and memory cost of FlowFox is substantial (a performance cost of around 20% on macro benchmarks for a simple two level policy), but not prohibitive.