The Evil Friend in Your Browser - Browser Extension Security Risks

Explore the dual nature of browser extensions in this 45-minute conference talk from OWASP BeNeLux Day. Delve into the benefits and risks associated with browser add-ons, examining their ability to enhance functionality while potentially compromising security. Analyze findings from a study of over 60,000 browser extensions, focusing on their use of current security models and identifying high-risk examples. Evaluate the limitations of existing security frameworks from a user perspective and discuss the need for improved safeguards. Gain insights from Dr. Achim D. Brucker, a Senior Lecturer and consultant for software and systems assurance, as he shares his expertise on browser security and risk-based testing strategies.