@inproceedings{bc3182ec26e6434682349866f01447d1,
title = "IBOS: A correct-by-construction modular browser",
abstract = "Current web browsers are complex, have enormous trusted computing bases, and provide attackers with easy access to computer systems. This makes web browser security a difficult issue that increases in importance as more and more applications move to the web. Our approach for this challenge is to design and build a correct-by-construction web browser, called IBOS, that consists of multiple concurrent components, with a small required trusted computing base. We give a formal specification of the design of this secure-by-construction web browser in rewriting logic. We use formal verification of that specification to prove the desired security properties of the IBOS design, including the address bar correctness and the same-origin policy.",
keywords = "Browser security, rewriting logic, same-origin policy",
author = "Ralf Sasse and King, {Samuel T.} and Jos{\'e} Meseguer and Shuo Tang",
year = "2013",
doi = "10.1007/978-3-642-35861-6_14",
language = "English (US)",
isbn = "9783642358609",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
pages = "224--241",
booktitle = "Formal Aspects of Component Software - 9th International Symposium, FACS 2012, Revised Selected Papers",
note = "9th International Symposium on Formal Aspects of Component Software, FACS 2012 ; Conference date: 12-09-2012 Through 14-09-2012",
}