Alex Belkin


Viterbi Faculty of Electrical Engineering, Technion

The Risks Of WebGL: Analysis, Evaluation and Detection

WebGL is a browser feature that enables JavaScript-based control of the graphics processing unit (GPU) to render interactive 3D and 2D graphics, without the use of plug-ins. This paper explores the potential threats derived from the recent move by browsers from WebGL 1.0 to the more powerful WebGL 2.0. We focus on two possible abuses of this feature: distributed password cracking and distributed cryptocurrency mining. Our evaluation of the attacks also includes the practical aspects of successful attacks, such as stealthiness and user-experience. Considering the danger of WebGL abuse, as observed in the experiments, we designed and evaluated a proactive defense. We implemented a Chrome extension that proved itself effective in detecting and blocking WebGL. Our results show that it is possible to use WebGL 2.0 in distributed attacks under real-world conditions.   *       MSc seminar under supervision of Prof. Israel Cidon.

Date: Thu 21 Feb 2019

Start Time: 12:00

End Time: 13:00

1061 | Electrical Eng. Building