Browser Security Model CS155 Spring 2014 Browser Security Model John Mitchell Reported Web Vulnerabilities "In the Wild" Data from aggregator and validator of NVD-reported vulnerabilities Web vs System vulnerabilities XSS peak