Work

Analysis of insecure configurations in Chrome Web Store extensions: Impact on user security and privacy

Year: 2025

Type: conference-paper

Abstract: Browser extensions, popular for enhancing functionality, pose risks to user privacy and security. This study analyzes insecure configurations in Chrome Web Store extensions, assessing their functional justification. Auditing 287 extensions revealed that many employ excessive permissions or unnecessary access to sensitive data without clear justification. Findings show that risky practices persist even in widely used tools, highlighting flaws in app stores’ verification processes. The research provides empirical evidence of these issues and advocates for stricter policies for developers, platforms, and regulators to balance functionality and security in the ecosystem.

DOI: 10.5753/sbseg.2025.11487

Authors: José R. S. Silva, Luiz H. B. A. Silva, Vitória B. A. Silva, Maria Gabriela Lima Damasceno, Caio B. de Souza, Andson Balieiro

Institution: Universidade Federal de Pernambuco

Language: English

Topic: Privacy, Security, and Data Protection

Subfield: Sociology and Political Science

Field: Social Sciences

Domain: Social Sciences

Open Access status: gold

Funders: Coordenação de Aperfeiçoamento de Pessoal de Nível Superior, Universidade Federal de Pernambuco

Award: G29316538

OpenAlex ID: W4414126744

FWCI:

Cites: 11

Cited by:

Related to: 10