Patent ID: 8365291
Filing Date: 2013-01-29
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for determining whether a browser extension leaks information over a network, comprising: providing a control flow graph (CFG), the CFG generated from a source code included with the browser extension, wherein the source code that generates the CFG is in a scripting language; determining, using a processor, a sensitive path in the CFG, the sensitive path beginning at a sensitive source node and ending at a sensitive end node; identifying a set of tainted variables in the CFG, each tainted variable in the set storing sensitive information; generating a subset of tainted variables, wherein each tainted variable in the subset is included in the sensitive path; and determining when at least one tainted variable in the subset of tainted variables is included in the sensitive end node, wherein the at least one tainted variable included in the sensitive end node is associated with a leak of sensitive information by the browser extension over the network.