Slides for a talk on Object Capability Security given in AgileBrazil 2011.

1. Object Capability
Security
Rafael Ferreira

5. Melissa

6. Document

7. Document
Macro

8. Document
Macro

9. Ambient
Document
Macro

10. Address
book Ambient
Document
Macro

11. Address
book Ambient
Document
Macro

13. Mafia Ville

14. Mafia Ville
Farm Wars

15. Ambient
Mafia Ville
Farm Wars

16. Ambient
Mafia Ville
Farm Wars

17. Ambient
Untrusted

19. X
Ambient
Untrusted

21. Ambient
Sandbox
Untrusted

22. Ambient
Sandbox
Untrusted

23. Ambient
Sandbox
Untrusted

24. X
Ambient
Untrusted

25. Untrusted

26. OBJ
ECT
S
Untrusted

27. How do objects
Meet?

28. var Creature = function () {...}
var TheCreator = {
make: function() {
var creature = new Creature
}
}

29. Parenthood
var Creature = function () {...}
var TheCreator = {
make: function() {
var creature = new Creature
}
}

30. make: function() {
var reference = ...
var newObject = {
...
var copy = reference
}
}

31. Endowment
make: function() {
var reference = ...
var newObject = {
...
var copy = reference
}
}

32. meet: function() {
var someObject = ...
var otherObject = ...
someObject.doSomething(otherObject)
}

33. Introduction
meet: function() {
var someObject = ...
var otherObject = ...
someObject.doSomething(otherObject)
}

34. this.reference = window
.document
.getElementById("farmWarsDiv")

35. Ambient
this.reference = window
.document
.getElementById("farmWarsDiv")

36. X
Ambient
this.reference = window
.document
.getElementById("farmWarsDiv")

37. Only connectivity
begets connectivity

38. Address
book Ambient
Document
Macro

39. Address
book
Text Editor Document

40. Address
book
Text Editor Document
Macro

41. Address
book
Text Editor Document
Macro

42. Object Capability
· Memory Safety
· No global actions
· No magic objects
· Encapsulation

43. The reference graph
is the access graph

44. Ambient
Mafia Ville
Farm Wars

45. Host
page

46. Widget
Area
>
<div
Host
page

47. Widget
Area Mafia
>
<div Ville
Host
page

48. Widget
Area Mafia
>
<div Ville
Host
page

49. Widget
Area Mafia
>
<div Ville
Host
page
<di
v>
Widget
Area
Farm Wars

50. Object Capability
· Memory Safety
· No global actions
· No magic objects
· Encapsulation

51. Object Capability
· Memory Safety
· No global actions
· No magic objects
· Encapsulation
c ri pt
av as
J

52. Google Caja

53. Google Caja
J avas cript
Ja vasc ript
Se cure

54. EcmaScript.Next
Still Unsafe

55. EcmaScript.Next
Still Unsafe
Can be secured

56. EcmaScript.Next
· “use strict;”
· Object.freeze
· Module System
· Safe Eval
· Proxies

57. Caretaker
StatusUpdater
= {
updateStatus: function(message)
}

58. Caretaker
StatusUpdater
Host
Widget
page

59. Caretaker
StatusUpdater Proxy
Host
page Widget

60. Caretaker
StatusUpdater Proxy
Host
page Gate Widget

61. obrigado
@rafaeldff