Browser extension control flow graph construction for determining sensitive paths

A system for determining a sensitive path in a control flow graph (CFG) of a browser extension, comprising:

• an extension analyzer gored in memory and configured to execute on a processor and configured to generate a CFG from a source code of the browser extension, wherein the control flow graph is particular to a programming language;
• and
• a path decoder configured to identify the sensitive path within the CFG for determining a user information leak by the browser extension, wherein to identify the sensitive path the path decoder is further configured to:
• determine a sensitive source node within a plurality of nodes in the CFG, wherein the sensitive source node accesses information of a user on a computing device that executes the browser extension;
• determine a sensitive end node within the plurality of nodes in the CFG, wherein the sensitive end node accesses the network on the computing device that executes the browser extension to transmit the information of the user;
• and
• traverse the CFG to identify whether the sensitive path exists from the sensitive source node to the sensitive end node,
• wherein the existence of the sensitive path is an indication that the browser extension leaks information of a user over a network.

An article of manufacture including a computer-readable medium having instructions retrieved thereon that, when executed by a computing device, cause the computing device to perform operations for determining a sensitive path in a control flow graph (CFG) of a browser extension, the operations comprising:

• generating a CFG from a source code of the browser extension for determining a user information leak the browser extension, wherein the CFG is particular to the programming language of the source code;
• identifying the sensitive path within the CFG, wherein the identifying further comprises:
• determining a sensitive source node within a plurality of nodes in the CFG, wherein the sensitive source node accesses information of a user on a computing device that executes the browser extension;
• determining a sensitive end node within the plurality of nodes in the CFG, wherein the sensitive end node accesses the network on the computing device that executes the browser extension to transmit the information of the user;
• and
• traversing the CFG to identify whether the sensitive path exists from the sensitive source node to the sensitive end node,
• wherein the existence of the sensitive path is an indication that the browser extension leaks information of a user over a network.