WEBSAND

Server-driven Outbound Web-application Sandboxing

Coordinatore	SAP AG    more  Organization address address: Vincenz Priessnitz Strasse 1 city: Karlsruhe postcode: 76131 contact info Titolo: Dr. Nome: Martin Cognome: Johns Email: send email Telefono: 496228000000 Fax: 4962280000000
Nazionalità Coordinatore	Germany [DE]
Totale costo	4˙865˙922 €
EC contributo	3˙199˙978 €
Programma	FP7-ICT Specific Programme "Cooperation": Information and communication technologies
Code Call	FP7-ICT-2009-5
Funding Scheme	CP
Anno di inizio	2010
Periodo (anno-mese-giorno)	2010-10-01   -   2014-03-31

 Partecipanti

#	participant	country	role	EC contrib. [€]
1	SAP AG  Organization address address: Vincenz Priessnitz Strasse 1 city: Karlsruhe postcode: 76131 contact info Titolo: Dr. Nome: Martin Cognome: Johns Email: send email Telefono: 496228000000 Fax: 4962280000000	DE (Karlsruhe)	coordinator	0.00
2	CHALMERS TEKNISKA HOEGSKOLA AB  Organization address address: - city: GOETEBORG postcode: 41296 contact info Titolo: Ms. Nome: Eva Cognome: Paulson Email: send email Telefono: +46 31 7723585 Fax: +46 31 165655	SE (GOETEBORG)	participant	0.00
3	KATHOLIEKE UNIVERSITEIT LEUVEN  Organization address address: Oude Markt city: LEUVEN postcode: 3000 contact info Titolo: Ms. Nome: Tine Cognome: Heylen Email: send email Telefono: +32 16 32 65 20 Fax: +32 16 32 65 15	BE (LEUVEN)	participant	0.00
4	SIEMENS AKTIENGESELLSCHAFT  Organization address address: Wittelsbacherplatz city: MUENCHEN postcode: 80333 contact info Titolo: Dr. Nome: Jorge Cognome: Cuellar Email: send email Telefono: +49 89 636 47585 Fax: +49 89 636 41166	DE (MUENCHEN)	participant	0.00
5	UNIVERSITAT PASSAU  Organization address address: Innstrasse city: PASSAU postcode: 94032 contact info Nome: Sabine Cognome: Wiendl Email: send email Telefono: +49 851 5091110 Fax: +49 851 5091102	DE (PASSAU)	participant	0.00

Mappa

 Word cloud

Esplora la "nuvola delle parole (Word Cloud) per avere un'idea di massima del progetto.

 Obiettivo del progetto (Objective)

Since its birth in 1990, the Web has evolved from a simple, stateless delivery mechanism for static hypertext documents to a fully-edged run-time environment for distributed, multi-party applications. Security becomes increasingly important in this context, but is typically only an afterthought in this process. The next wave, the Future Internet, will continue to rely on the same web application technology, while adopting more p2p and mashup-style approaches. Today's server-centric solutions will give way to a rich and stateful client-centric paradigm with even less manageable security and even more severe threats to the web-based economy of the Future Internet. Data and services from multiple heterogeneous domains, aggregated both on the server-side and on an end-user's client, demand for a novel, comprehensive security solution that increases the user's trust into the technological infrastructure. WebSand tackles this demand by departing from the observation that security should be server-driven. Even though security preferences from end-users at the client-side have to be taken into account, only the service developers at the server-side have the necessary expertise and context information to define the policies to be enforced. Moreover, server-driven security can be deployed relatively easily, since much can be achieved without updating the client-side platform. The WebSand framework consists of four major building blocks: (1) a secure interaction model, that allows explicit and fine-grained control concerning incoming Web communication, (2) methods for secure end-to-end information flow control, to enforce confidentiality and integrity properties, (3) behavioral sandbox environments for secure client-side and server-side composition of multi-origin components, and (4) a declarative and expressive policy description mechanism that ties the individual components together into a unified security architecture spanning client and server.