MSc Dissertation: An investigation of JavaScript isolation mechanisms: Sandboxing implementations

Web developers have been relying more and more on the features of JavaScript for deploying a range of applications, from online banking and email services to digital media delivery and gaming, rendering it the assembly language of the Internet. Since it allows external scripts from untrusted third-parties to access the application's content, it has become an attractive target for cyber attackers. This untested and untrusted by the application's true author code cannot only damage the content of the application it runs within, but also obtain access and modify other applications running on the same browser, or even the host system.
In this paper, we compare implementations that operate as Sandboxes in order to isolate JavaScript from untrusted third-parties, so that they have limited privileges over the application. We use specific metrics to compare them, and afterwards we evaluate those results after testing them on an x64 machine.