Web browser and Security Threats

1
Web Browser and Security Threats
2
Table of Contents

• Web Browser
• Website and Web Hosting
• Functions of a Web Browser
• Types of Web Browsers
• Web Browser and Security Concerns
• Risks Associated with Web Browsers Features

• Risks Associated with Web Browsers Features
  (Java)
• Risks Associated with Web Browsers Features
  (Plug-ins)
• Risks Associated with Web Browsers Features
  (Cookies)
• Risks Associated with Web Browsers Features
  (JavaScript and VBScript)
• Conclusion

3
Web Browser

• It is a software application that is used to
  access online information on the Internet. When
  any information is requested by a user over the
  World Wide Web, it is the web browser that makes
  the data available for viewing by transmitting it
  from a web server and then displaying it onto the
  web page of the screen of the user. The
  respective URL of a website is entered into a
  browser in order to reach a website. A web
  browser makes it possible to open multiple web
  pages simultaneously.

4
Website and Web Hosting

• In the context of a web browser, it is essential
  to first discuss the concept of a website. A
  website refers to a group of related web pages
  and content (data) that is available for online
  browsing by viewers. It is located under a single
  domain and can be identified by a common domain
  name.
• Every website is made accessible online by a
  certain web hosting service provider (also
  referred to as a web host). Server space is
  leased by this web host to store as well as make
  available the files of a website. These web
  hosting service providers also make available the
  necessary services and the technologies that
  deliver the files of a website to make it
  accessible for online viewing.
• Terms such as Top Cloud Hosting Company or the
  Best Windows Hosting Company as well as
  Website Hosting Companies in India are used to
  refer to web hosting companies that provide
  various types of web hosting services as per the
  requirement of different websites.

5
Functions of a Web Browser

• The functions of a web browser are mentioned
  below, in no particular order-
• Making information available to users by
  retrieving it from the Internet
• Making it possible to visit websites
• Making it easy to surf the Internet
• Internal cache is used by browsers. This enables
  the user to visit the same web page multiple
  times
• Making multiple options (home, reload etc.)
  available, to ensure convenience of Internet
  browsing

6
1-800-123 -8156

• Whoa! Thats a big number, arent you
  proud?

7
Types Of Web Browser

• Despite their functions being the same, there
  are different web browsers which are mentioned
  below, chronologically-
• World Wide Web
• Mosaic
• Netscape Navigator
• Internet Explorer
• Mozilla Firefox
• Google Chrome

8
Web Browser and Security Concerns

• Web browsers security can be compromised in one
  or more of the ways that are mentioned below, in
  no particular order-
• Possibility of the main browser executable being
  hacked
• Possibility of the operating systems breach and
  malware reading/modifying the browser memory
  space (in privilege mode)
• Possibility of components of the browser being
  hacked
• A malware running as a background process in the
  operating system, which reads/modifies the
  browser memory space (in privileged mode)
• Possibility of browser network communications
  being intercepted outside the system
• Possibility of browser plugins being hacked

9
Risks Associated with Web Browsers Features

• Some of the risks that come along with certain
  specific features of web browsers are mentioned
  below, in no particular order-
• ActiveX Technology Related Risks- ActiveX adds
  extra functionality to web browsing by letting
  the web browser utilize applications or parts of
  it. Its flip side is, it can contribute to a rise
  in severe vulnerabilities if proper
  implementation doesnt take place. One of the
  risks is, that it increases significantly the
  attack surface of a system.

10
Risks Associated with Web Browsers Features
(Java)

• Java, which is a programming language that is
  object-oriented, aids in developing websites
  active content. The Java code (the applet) is
  executed by a JVM (Java Virtual Machine). These
  Java applets are independent of the operating
  system. Usually, the interaction of the Java
  applets with the system is limited but different
  JVM implementations come along with certain
  vulnerabilities that let the applets bypass any
  restriction.

11
Risks Associated with Web Browsers Features
(Plug-ins)

• Plug-ins cant be executed outside a web browser.
  Often these have either designing or programming
  flaws which lead to vulnerabilities. Not
  following the same origin policy leads to
  encountering these flaws.

12
Risks Associated with Web Browsers Features
(Cookies)

• Unlike session cookies, persistent cookies do not
  get cleared when the browser is closed.
  Persistent cookies lead to a higher risk factor
  than the session cookies. Cookies in general can
  contain information about the websites that are
  visited by a user or the credentials for logging
  into a particular site etc. Cookies can pose a
  threat to a users privacys violation as these
  identify uniquely the visitors of a website. A
  cybercriminal may gain unauthorized access to a
  website that uses cookies for authentication, by
  getting hold of such cookies.

13
Risks Associated with Web Browsers Features
(JavaScript and VBScript)

• JavaScript and VBScript are scripting languages,
  which enable the addition of a range of features
  as well interactivity to any web page by the web
  page authors. Unfortunately, this benefit can be
  exploited by cybercriminals. The various
  vulnerabilities that get introduced through
  scripting support are detection evasion,
  cross-site scripting, and cross-zone and
  cross-domain vulnerabilities.

14
Conclusion

• As is evident, the various types of web browsers
  which are used extensively when surfing the
  Internet, can be exploited by cybercriminals.
  Hence, proper attention should be paid to a web
  browsers security in order to surf the Internet
  safely and evade data breaches.

15
Thanks!

• ANY QUESTIONS?

• www.htshosting.org