PROJECT TITLE :

Stickler: Defending against Malicious Content Distribution Networks in an Unmodified Browser

ABSTRACT:

Web site publishers will derive enormous performance advantages and price savings by directing traffic to their sites through content distribution networks (CDNs). But, publishers who use CDNs should trust they will not modify the positioning's JavaScript, CSS, pictures, or alternative media en route to end users. A CDN that violates this trust may inject ads into websites, downsample media to save bandwidth, or, worse, inject malicious JavaScript code to steal user secrets it could not otherwise access. The authors present Stickler, a system for web site publishers that guarantees the end-to-finish authenticity of content served to users that simultaneously lets publishers reap the benefits of CDNs. Crucially, Stickler achieves these guarantees without requiring modifications to the browser.