ABSTRACT

Executive Summary When users open a Web page with Internet Explorer, Firefox, or any other Web browser, they only notice the page they typed in the address bar. Regular users rarely realize that to resolve some pages completely, their computers must connect to other, often unknown Web sites. Few users are aware of these inline frames, or “IFrames,” because they are transparent to everyday users. Browsers use IFrames to load another Web site into the one the user knows he or she is viewing. A design feature of the Web browsing experience, through many popular browsers, IFrames were not designed for malicious purposes, but their simplicity has made them ideal attack vectors for malicious interests.