End-to-end web application security

摘要: Web applications are important, ubiquitous distributed systems whose current security relies primarily on server-side mechanisms. This paper makes the end-to-end argument that client and server must collaborate to achieve goals, eliminate common exploits, secure emerging class of rich, cross-domain referred as 2.0. In order support security, clients be enhanced. We introduce Mutation-Event Transforms: an easy-to-use client-side mechanism can enforce even fine-grained, application-specific policies, implementation requires only straightforward changes existing browsers. give numerous examples attractive, new policies demonstrate advantages application our proposed mechanism.