The Vivaldi browser has recently started supporting extensions in its Android app [1]. This enables users to install and use some extensions that were previously primarily developed for desktop browsers. Bringing browser extensions to mobile devices raises new security and privacy questions. In particular, it is unclear whether established extension-security mechanisms, such as sandboxing, permission models, and isolation from web content, provide comparable protection in a mobile environment. At the same time, mobile extension support creates opportunities to develop tools that analyse or improve the security and privacy of websites accessed from mobile devices.
This thesis has many potential objectives:
- Study and compare the security models, permissions, and isolation mechanisms for browser extensions on Android and desktop platforms
- Develop a browser extension to analyse the security and privacy of mobile websites
- Develop a browser extension to enhance security-related applications, e.g., password managers
This project is well suited for students with an interest in browser and web application security. Experience in developing browser extensions or knowledge of JavaScript are advantageous. Since the browser extension is currently only available on Android, access to an Android device would be beneficial.
References: