Project description
New information flow tracking technology
Websites are interactive thanks to JavaScript, a programming language. It’s one of the core technologies of the worldwide web. For instance, web applications – from online banking to audio or in-car infotainment applications – need JavaScript code, which is downloaded into the user’s browser every time a web page is visited. Security, however, is also an issue since attacking a web page may be as simple as compromising a third-party code component. With this in mind, the ERC funded FlowShield project will design an innovative platform for security testing and secure integration of JavaScript code from different providers. With banking and automotive industries as the prime targets, FlowShield will identify market applications and business models for using the information flow tracking technology.
Objective
In today’s technology-centric world, web applications are a key
enabler for many day-to-day activities ranging from online banking to
in-vehicle infotainment. These applications have access to a wealth of
sensitive information. Unauthorized disclosure and corruption of this
information may result in financial damage, privacy violations, and
loss of human lives.
At the heart of modern web applications lies the *JavaScript*
language. When a user visits a web page, JavaScript code from
different sources is downloaded into the user’s browser and run *with
the same privileges* as if the code came from the web page
itself. This implies that to attack a web page, it is sufficient to
compromise a third-party code component.
Drawing on the technology of *information flow tracking* developed by
the PI’s ERC project, FlowShield will provide *an innovative platform
for security testing and secure integration* of JavaScript code from
different providers. This will enable ICT companies to benefit from
the tremendous business opportunities created by third-party services,
while providing secure products to their customers.
With banking and automotive industries as prime targets, FlowShield
will confirm the potential of our security solution by investigating
market trends, competitors, Intellectual Property Rights (IPR) and
business models, while seeking strategic alliances with industrial and
innovation actors. The goal is to identify concrete market
applications and business models for securing web applications by
utilizing the information flow tracking technology. FlowShield will
allow ICT companies to benefit from the tremendous business
opportunities created by third-party services, while providing secure
products to their customers.
Fields of science (EuroSciVoc)
CORDIS classifies projects with EuroSciVoc, a multilingual taxonomy of fields of science, through a semi-automatic process based on NLP techniques. See: The European Science Vocabulary.
CORDIS classifies projects with EuroSciVoc, a multilingual taxonomy of fields of science, through a semi-automatic process based on NLP techniques. See: The European Science Vocabulary.
- social sciences sociology social issues corruption
- engineering and technology mechanical engineering vehicle engineering automotive engineering
- social sciences economics and business business and management business models
You need to log in or register to use this function
We are sorry... an unexpected error occurred during execution.
You need to be authenticated. Your session might have expired.
Thank you for your feedback. You will soon receive an email to confirm the submission. If you have selected to be notified about the reporting status, you will also be contacted when the reporting status will change.
Programme(s)
Multi-annual funding programmes that define the EU’s priorities for research and innovation.
Multi-annual funding programmes that define the EU’s priorities for research and innovation.
-
H2020-EU.1.1. - EXCELLENT SCIENCE - European Research Council (ERC)
MAIN PROGRAMME
See all projects funded under this programme
Topic(s)
Calls for proposals are divided into topics. A topic defines a specific subject or area for which applicants can submit proposals. The description of a topic comprises its specific scope and the expected impact of the funded project.
Calls for proposals are divided into topics. A topic defines a specific subject or area for which applicants can submit proposals. The description of a topic comprises its specific scope and the expected impact of the funded project.
Funding Scheme
Funding scheme (or “Type of Action”) inside a programme with common features. It specifies: the scope of what is funded; the reimbursement rate; specific evaluation criteria to qualify for funding; and the use of simplified forms of costs like lump sums.
Funding scheme (or “Type of Action”) inside a programme with common features. It specifies: the scope of what is funded; the reimbursement rate; specific evaluation criteria to qualify for funding; and the use of simplified forms of costs like lump sums.
ERC-POC - Proof of Concept Grant
See all projects funded under this funding scheme
Call for proposal
Procedure for inviting applicants to submit project proposals, with the aim of receiving EU funding.
Procedure for inviting applicants to submit project proposals, with the aim of receiving EU funding.
(opens in new window) ERC-2018-PoC
See all projects funded under this callHost institution
Net EU financial contribution. The sum of money that the participant receives, deducted by the EU contribution to its linked third party. It considers the distribution of the EU financial contribution between direct beneficiaries of the project and other types of participants, like third-party participants.
412 96 Goteborg
Sweden
The total costs incurred by this organisation to participate in the project, including direct and indirect costs. This amount is a subset of the overall project budget.