Designing the CRISP Document Format: A Secure Declarative Language for the Web

Laura Watiker, Oberlin College

Location

Science Center, A255

Document Type

Presentation

Start Date

4-24-2015 1:30 PM

End Date

4-24-2015 2:30 PM

Abstract

The contemporary web forces developers and users to mitigate numerous vulnerabilities to security and privacy. In this study, I explore how the CRISP Document Format (CDF) project focuses on designing a fundamentally secure language for the web, and thereby frees these parties from addressing each issue one by one. CDF is a fully declarative client-side language for creating web pages where sites are developed from a finite set of whitelisted static and dynamic elements. As a result of its design, a CDF site holds privacy guarantees for the client while also relieving developers of the burden of building and maintaining the security of their sites.

Notes

Session 1, Panel 4 - Tinkering with Models: Studies in Security, Equilibrium, and Intemperance
Moderator: Bob Geitz, Associate Professor of Computer Science

Major

Computer Science; Economics

Advisor(s)

Benjamin Kuperman, Computer Science
Hirschel Kasper, Economics

Project Mentor(s)

Cynthia Taylor, Computer Science

April 2015

This document is currently not available here.

Share

COinS
 
Apr 24th, 1:30 PM Apr 24th, 2:30 PM

Designing the CRISP Document Format: A Secure Declarative Language for the Web

Science Center, A255

The contemporary web forces developers and users to mitigate numerous vulnerabilities to security and privacy. In this study, I explore how the CRISP Document Format (CDF) project focuses on designing a fundamentally secure language for the web, and thereby frees these parties from addressing each issue one by one. CDF is a fully declarative client-side language for creating web pages where sites are developed from a finite set of whitelisted static and dynamic elements. As a result of its design, a CDF site holds privacy guarantees for the client while also relieving developers of the burden of building and maintaining the security of their sites.