NTT Group paper selected for NDSS 2023, a top international conference on security.

At the Network and Distributed System Security Symposium (NDSS) 2023, scheduled to be held on February 28 - March 2, 2023, a paper by following researchers was accepted.

Takuya Watanabe,
Social Informatics Laboratories of Service Innovation Laboratory Group

Eitaro Shioji,
Social Informatics Laboratories of Service Innovation Laboratory Group

Mitsuaki Akiyama,
Social Informatics Laboratories of Service Innovation Laboratory Group

NDSS is one of the top international conferences in the field of security.

Their paper, "Browser Permission Mechanisms Demystified," presented the method of efficiently assessing the implementation inconsistencies in web permission mechanisms among browsers and found new security and privacy threats exploiting the permission mechanisms. In addition, the paper recommended the sharing of best practices and standardization of browser permission mechanisms to international standardization bodies.

The web browser permission is a mechanism for controlling what operations a web page can perform on a computer or smartphone. For instance, on a web page that uses audio or video, users can choose whether to allow access to the microphone or camera. Our research results have significantly reduced the risk of abuse of the permissions, thereby improving the safety of Internet users.

NTT will continue to work on fundamental studies aimed at creating innovative technologies, and contribute to a safe and secure society through cybersecurity research and development.

References:

Kazuki Nomoto, Takuya Watanabe, Eitaro, Shioji, Mitsuaki Akiyama and Tatsuya Mori, "Browser Permission Mechanisms Demystified," in Proceedings of the Network and Distributed System Security Symposium (NDSS) 2023.
https://www.ndss-symposium.org/ndss-paper/browser-permission-mechanisms-demystified/

JVNTA# 96606604: Security Problem in Web Browser Permission Mechanism
https://jvn.jp/en/ta/JVNTA96606604/