Work

Peripheral Instinct: How External Devices Breach Browser Sandboxes

Year: 2025

Type: conference-paper

Abstract: Browser APIs such as WebHID, WebUSB, Web Serial, and Web MIDI enable web applications to interact directly with external devices. The support of such APIs in Chromium-based browsers, such as Chrome and Edge, radically changes the threat model for peripherals and increases the attack surface. In the past, devices could assume a trusted host, i.e., the operating system. Now, the host is a potentially malicious website and cannot be trusted.

DOI: 10.1145/3696410.3714637

Authors: Leon Trampert, Lorenz Hetterich, Lukas Gerlach, Mona Schappert, Christian Rossow, Michael Schwarz

Institutions: Helmholtz Center for Information Security, Saarland University

Language: English

Topic: Security and Verification in Computing

Subfield: Artificial Intelligence

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

OpenAlex ID: W4409671367

FWCI:

Cites: 19

Cited by:

Related to: 10