Faily, Shamal

Lyle, J.

Winandy, M.

Bournemouth University Research Online

The Workshop on Web Applicationsand Secure HardwareJohn Lyle1, Shamal Faily1 and Marcel Winandy21 Department of Computer Science, University of Oxford, UKfirst.last@cs.ox.ac.uk2 Horst Go¨rtz Institute for IT-Security, Ruhr-University Bochum, Germanymarcel.winandy@trust.rub.deWorkshop OverviewWeb browsers are becoming the platform of choice for applications that need towork across a wide range of different devices, including mobile phones, tablets,PCs, TVs and in-car systems. However, for web applications which require ahigher level of assurance, such as online banking, mobile payment, and mediadistribution (DRM), there are significant security and privacy challenges. A po-tential solution to some of these problems can be found in the use of securehardware – such as TPMs, ARM TrustZone, virtualisation and secure elements– but these are rarely accessible to web applications or used by web browsers.The First Workshop on Web Applications and Secure Hardware (WASH’13)focused on how secure hardware could be used to enhance web applicationsand web browsers to provide functionality such as credential storage, attestationand secure execution. This included challenges in compatibility (supporting thesame security features despite different user hardware) as well as multi-devicescenarios where a device with hardware mechanisms can help provide assurancefor systems without. Also of interest were proposals to enhance existing securitymechanisms and protocols, security models where the browser is not trusted bythe web application, and enhancements to the browser itself.CommitteesWe are grateful to the following people for making this workshop possible.Organising Committee– John Lyle (University of Oxford)– Marcel Winandy (Ruhr-University Bochum)– Shamal Faily (University of Oxford)Programme Committee– Andrea Atzeni (Politecnico di Torino)– Andrew Martin (University of Oxford )– Chris Mitchell (Royal Holloway)– John Lyle (University of Oxford)– Jun Ho Huh (University of Illinois at Urbana-Champaign)– Kevin Jones (EADS Innovation Works, UK)– Marcel Winandy (Ruhr-University Bochum)– Marcos Ca´ceres (Data.Driven)– Michael LeMay (Intel, USA)– Nick Allott (Nquiringminds)– Ronald To¨gl (TU Graz)– Shamal Faily (University of Oxford)– Virginie Galindo (Gemalto)Additional Reviewers– Andrew Paverd (University of Oxford)– Atanas Filyanov (Ruhr-University Bochum)– Justin King-Lacroix (University of Oxford)Local Organisation– Michael Huth, Imperial College LondonReview ProcessEvery submitted paper received at least three reviews from qualified academicreviewers. The acceptance rate was 43%.

The Workshop on Web Applications and Secure Hardware; Abstract

http://eprints.bournemouth.ac.uk/22059/1/lyfw13.pdf

The Workshop on Web Applications and Secure Hardware; Abstract

Abstract

Similar works

Full text

Available Versions

Bournemouth University Research Online