A Survey on Vulnerabilities of Service Workers

Yeomin Jeong; Junbeom Hur

doi:10.1109/ICTC55196.2022.9952818

A Survey on Vulnerabilities of Service Workers

Yeomin Jeong
, Junbeom Hur

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

In a Progressive Web App (PWA), a kind of application software of the web, a service worker (SW) plays a key role as a one of the fundamental components to enhance the user's browsing experiences. For this purpose, the SW supports several features such as push notification, offline access, background code execution, etc. Since the SW provides prolific capabilities, it has been the main target to abuse by malicious attackers to deliver diverse attacks through the web applications such as crypto-currency mining, history sniffing, phishing. In this paper, we introduce the SW's functionalities and vulnerabilities, and discuss the existing attack methodologies and their implications.

Original language	English
Title of host publication	ICTC 2022 - 13th International Conference on Information and Communication Technology Convergence
Subtitle of host publication	Accelerating Digital Transformation with ICT Innovation
Publisher	IEEE Computer Society
Pages	2080-2082
Number of pages	3
ISBN (Electronic)	9781665499392
DOIs	https://doi.org/10.1109/ICTC55196.2022.9952818
Publication status	Published - 2022
Event	13th International Conference on Information and Communication Technology Convergence, ICTC 2022 - Jeju Island, Korea, Republic of Duration: 2022 Oct 19 → 2022 Oct 21

Publication series

Name	International Conference on ICT Convergence
Volume	2022-October
ISSN (Print)	2162-1233
ISSN (Electronic)	2162-1241

Conference

Conference	13th International Conference on Information and Communication Technology Convergence, ICTC 2022
Country/Territory	Korea, Republic of
City	Jeju Island
Period	22/10/19 → 22/10/21

Bibliographical note

Publisher Copyright:
© 2022 IEEE.

Keywords

Progressive Web App (PWA)
Service worker
history sniffing
phishing
web push

ASJC Scopus subject areas

Information Systems
Computer Networks and Communications

Access to Document

10.1109/ICTC55196.2022.9952818

Cite this

Jeong, Y., & Hur, J. (2022). A Survey on Vulnerabilities of Service Workers. In ICTC 2022 - 13th International Conference on Information and Communication Technology Convergence: Accelerating Digital Transformation with ICT Innovation (pp. 2080-2082). (International Conference on ICT Convergence; Vol. 2022-October). IEEE Computer Society. https://doi.org/10.1109/ICTC55196.2022.9952818

A Survey on Vulnerabilities of Service Workers. / Jeong, Yeomin; Hur, Junbeom.
ICTC 2022 - 13th International Conference on Information and Communication Technology Convergence: Accelerating Digital Transformation with ICT Innovation. IEEE Computer Society, 2022. p. 2080-2082 (International Conference on ICT Convergence; Vol. 2022-October).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Jeong, Y & Hur, J 2022, A Survey on Vulnerabilities of Service Workers. in ICTC 2022 - 13th International Conference on Information and Communication Technology Convergence: Accelerating Digital Transformation with ICT Innovation. International Conference on ICT Convergence, vol. 2022-October, IEEE Computer Society, pp. 2080-2082, 13th International Conference on Information and Communication Technology Convergence, ICTC 2022, Jeju Island, Korea, Republic of, 22/10/19. https://doi.org/10.1109/ICTC55196.2022.9952818

@inproceedings{a8a576c42fa5435389f2b201ea0d07a5,

title = "A Survey on Vulnerabilities of Service Workers",

abstract = "In a Progressive Web App (PWA), a kind of application software of the web, a service worker (SW) plays a key role as a one of the fundamental components to enhance the user's browsing experiences. For this purpose, the SW supports several features such as push notification, offline access, background code execution, etc. Since the SW provides prolific capabilities, it has been the main target to abuse by malicious attackers to deliver diverse attacks through the web applications such as crypto-currency mining, history sniffing, phishing. In this paper, we introduce the SW's functionalities and vulnerabilities, and discuss the existing attack methodologies and their implications.",

keywords = "Progressive Web App (PWA), Service worker, history sniffing, phishing, web push",

author = "Yeomin Jeong and Junbeom Hur",

note = "Publisher Copyright: {\textcopyright} 2022 IEEE.; 13th International Conference on Information and Communication Technology Convergence, ICTC 2022 ; Conference date: 19-10-2022 Through 21-10-2022",

year = "2022",

doi = "10.1109/ICTC55196.2022.9952818",

language = "English",

series = "International Conference on ICT Convergence",

publisher = "IEEE Computer Society",

pages = "2080--2082",

booktitle = "ICTC 2022 - 13th International Conference on Information and Communication Technology Convergence",

}

TY - GEN

T1 - A Survey on Vulnerabilities of Service Workers

AU - Jeong, Yeomin

AU - Hur, Junbeom

PY - 2022

Y1 - 2022

N2 - In a Progressive Web App (PWA), a kind of application software of the web, a service worker (SW) plays a key role as a one of the fundamental components to enhance the user's browsing experiences. For this purpose, the SW supports several features such as push notification, offline access, background code execution, etc. Since the SW provides prolific capabilities, it has been the main target to abuse by malicious attackers to deliver diverse attacks through the web applications such as crypto-currency mining, history sniffing, phishing. In this paper, we introduce the SW's functionalities and vulnerabilities, and discuss the existing attack methodologies and their implications.

AB - In a Progressive Web App (PWA), a kind of application software of the web, a service worker (SW) plays a key role as a one of the fundamental components to enhance the user's browsing experiences. For this purpose, the SW supports several features such as push notification, offline access, background code execution, etc. Since the SW provides prolific capabilities, it has been the main target to abuse by malicious attackers to deliver diverse attacks through the web applications such as crypto-currency mining, history sniffing, phishing. In this paper, we introduce the SW's functionalities and vulnerabilities, and discuss the existing attack methodologies and their implications.

KW - Progressive Web App (PWA)

KW - Service worker

KW - history sniffing

KW - phishing

KW - web push

UR - https://www.scopus.com/pages/publications/85143255031

U2 - 10.1109/ICTC55196.2022.9952818

DO - 10.1109/ICTC55196.2022.9952818

M3 - Conference contribution

AN - SCOPUS:85143255031

T3 - International Conference on ICT Convergence

SP - 2080

EP - 2082

BT - ICTC 2022 - 13th International Conference on Information and Communication Technology Convergence

PB - IEEE Computer Society

T2 - 13th International Conference on Information and Communication Technology Convergence, ICTC 2022

Y2 - 19 October 2022 through 21 October 2022

ER -

A Survey on Vulnerabilities of Service Workers

Abstract

Publication series

Conference

Bibliographical note

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this