Search Results - untrusted JavaScript code~

Defending the OSN-Based Web Applications from XSS Attacks Using Dynamic JavaScript Code and Content Isolation

Authors: Brij B. Gupta Shashank Gupta Pooja Chaudhary

Source: Springer Proceedings in Business and Economics ISBN: 9789811055768

Subject Terms: 3. Good health

Access URL: https://link.springer.com/chapter/10.1007/978-981-10-5577-5_9
https://rd.springer.com/chapter/10.1007/978-981-10-5577-5_9

A client‐server JavaScript code rewriting‐based framework to detect the XSS worms from online social network

Authors: Shashank Gupta B.B. Gupta Pooja Chaudhary

Source: Concurrency and Computation: Practice and Experience. 31

Subject Terms: 0202 electrical engineering, electronic engineering, information engineering, 02 engineering and technology

Access URL: https://onlinelibrary.wiley.com/doi/full/10.1002/cpe.4646
http://eprints.bits-pilani.ac.in/2173/
https://dblp.uni-trier.de/db/journals/concurrency/concurrency31.html#GuptaGC19

Designing a XSS defensive framework for web servers deployed in the existing smart city infrastructure

Authors: Gupta, Brij B. Chaudhary, Pooja Gupta, Shashank

Source: Gupta , B B , Chaudhary , P & Gupta , S 2020 , ' Designing a XSS defensive framework for web servers deployed in the existing smart city infrastructure ' , Journal of Organizational and End User Computing , vol. 32 , no. 4 , pp. 85-111 . https://doi.org/10.4018/JOEUC.2020100105

Subject Terms: Smart City Cyber Security, Trusted Remark Statement Injection, Untrusted Javascript Code, XSS Attack

File Description: application/pdf

Availability: https://researchers.mq.edu.au/en/publications/4c662184-8557-4c25-9038-d788aaca9e46
https://doi.org/10.4018/JOEUC.2020100105
https://research-management.mq.edu.au/ws/files/165796648/165497384.pdf

Securing Trigger-Action Platforms With WebAssembly

Säkra trigger-aktion-plattformar med WebAssembly

Authors: Salim, Djiar

Subject Terms: Trigger-action, Untrusted code execution, JavaScript sandbox, WebAssembly isolation, Trigger-aktion, Exekveringavopålitligkod, JavaScript-sandlåda, WebAssemblyisolering, Computer Sciences, Datavetenskap (datalogi)

File Description: application/pdf

Relation: TRITA-EECS-EX ; 2022:642

Availability: http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-321994

XSS-immune: a Google chrome extension-based XSS defensive framework for contemporary platforms of web applications.

Authors: Gupta, Shashank Gupta, Brij Bhooshan

Source: Security & Communication Networks; 11/25/2016, Vol. 9 Issue 17, p3966-3986, 21p

Subject Terms: HTTP (Computer network protocol), PERFORMANCE evaluation, CONTEXT-aware computing, WEB-based user interfaces

Reviews & Products: GOOGLE Chrome (Computer software)

A client‐server JavaScript code rewriting‐based framework to detect the XSS worms from online social network.

Authors: Gupta, Shashank Gupta, B.B. Chaudhary, Pooja

Source: Concurrency & Computation: Practice & Experience; 11/10/2019, Vol. 31 Issue 21, pN.PAG-N.PAG, 1p

Subject Terms: JAVASCRIPT programming language, ONLINE social networks, INTERNET privacy, WORMS, WEB-based user interfaces

Vetting Browser Extensions for Security Vulnerabilities with VEX.

Authors: Bandhakavi, Sruthi Tiku, Nandit Pittman, Wyatt et al.

Source: Communications of the ACM; Sep2011, Vol. 54 Issue 9, p91-99, 9p, 3 Diagrams, 5 Charts

Subject Terms: WEB browser security, ANTI-malware (Computer software), MALWARE, COMPUTER security, JAVASCRIPT programming language, WORLD Wide Web

XSS-secure as a service for the platforms of online social network-based multimedia web applications in cloud.

Authors: Gupta, Shashank Gupta, B. B.

Source: Multimedia Tools & Applications; Feb2018, Vol. 77 Issue 4, p4829-4861, 33p

Subject Terms: COMPUTER security vulnerabilities, ONLINE social networks software, CLOUD computing security measures, JAVASCRIPT programming language, SOFTWARE frameworks, COMPUTER software

Typed-based verification of Web sandboxes.

Authors: Gibbs Politz, Joe Guha, Arjun Krishnamurthi, Shriram

Source: Journal of Computer Security; 2014, Vol. 22 Issue 4, p511-565, 55p

Subject Terms: JAVASCRIPT programming language, COMPUTER programming, WEBSITES, CORPORATE websites, COMPUTER viruses

Lightweight Enforcement of Fine-Grained Security Policies for Untrusted Software

Authors: Phung, Phu, 1979

Subject Terms: security policy enforcement, JavaScript security, web-application security, vehicle software security, untrusted software

File Description: electronic

Access URL: https://research.chalmers.se/publication/146093
http://publications.lib.chalmers.se/records/fulltext/146093.pdf

A Two-Tier Sandbox Architecture to Enforce Modular Fine-Grained Security Policies for Untrusted JavaScript

Authors: Phung, Phu, 1979

Subject Terms: self-protecting JavaScript, ECMAScript 5, mashup security, sandbox, Untruste JavaScript

Access URL: https://research.chalmers.se/publication/146091

A two-tier sandbox architecture for untrusted JavaScript

Authors: Phung, Phu Desmet, Lieven

Source: JSTools '12 Proceedings of the Workshop on JavaScript Tools, Beijing,13 June, 2012. :1-10

Subject Terms: Web application security, Web mashups, Fine-grained security policy, Untrusted

Access URL: https://research.chalmers.se/publication/168610

XSS-SAFE: A Server-Side Approach to Detect and Mitigate Cross-Site Scripting (XSS) Attacks in JavaScript Code.

Authors: Gupta, Shashank Gupta, B.

Source: Arabian Journal for Science & Engineering (Springer Science & Business Media B.V. ); Mar2016, Vol. 41 Issue 3, p897-920, 24p

Subject Terms: JAVASCRIPT programming language, HTML (Document markup language), WEB-based user interfaces

A multi-party, fine-grained permission and policy enforcement framework for hybrid mobile applications.

Authors: Phung, Phu H. Reddy, Rakesh S.V. Cap, Steven et al.

Source: Journal of Computer Security; 2020, Vol. 28 Issue 3, p375-404, 30p

Subject Terms: MOBILE apps, MOBILE operating systems, JAVASCRIPT programming language, ACCESS control

Geographic Terms: CORDOBA (Spain)

Reviews & Products: ANDROID (Operating system)

Building Secure Web Applications with Automatic Partitioning.

Authors: Chong, Stephen Jed Liu Myers, Andrew C. et al.

Source: Communications of the ACM; Feb2009, Vol. 52 Issue 2, p79-87, 9p, 1 Diagram, 5 Charts

Subject Terms: WORLD Wide Web, COMPUTER programming, JAVASCRIPT programming language, CLIENT/SERVER computing, INTERNET software, AUTOMATION

Begin to Code : Building Apps and Games in the Cloud

Authors: Rob Miles

Resource Type: eBook.

Subjects: Cloud computing, Video games--Programming, Application software--Development

Categories: COMPUTERS / Programming / General, COMPUTERS / Languages / JavaScript, COMPUTERS / Distributed Systems / Client-Server Computing

JS-SAN: defense mechanism for HTML5-based web applications against javascript code injection vulnerabilities.

Authors: Gupta, Shashank Gupta, B. B.

Source: Security & Communication Networks; 7/25/2016, Vol. 9 Issue 11, p1477-1495, 19p

Subject Terms: JAVASCRIPT programming language, DATA extraction, HTML (Document markup language), WORLD Wide Web

Reviews & Products: GOOGLE Chrome (Computer software)

Detecting malicious JavaScript code in Mozilla.

Authors: Hallaraker, O. Vigna, G.

Source: 10th IEEE International Conference on Engineering of Complex Computer Systems (ICECCS'05); 2005, p85-94, 10p

NodeXP: NOde.js server-side JavaScript injection vulnerability DEtection and eXPloitation.

Authors: Ntantogian, Christoforos Bountakas, Panagiotis Antonaropoulos, Dimitris et al.

Source: Journal of Information Security & Applications. May2021, Vol. 58, pN.PAG-N.PAG. 1p.

Subject Terms: *JAVASCRIPT programming language, *MATHEMATICAL functions, *METHODOLOGY, *MACHINE learning, *INFORMATION & communication technology security

Lightweight compilation of (C)LP to JavaScript.

Authors: MORALES, JOSE F. HAEMMERLÉ, RÉMY CARRO, MANUEL et al.

Source: Theory & Practice of Logic Programming; Jul2012, Vol. 12 Issue 4/5, p755-773, 19p

Subject Terms: COMPILERS (Computer programs), JAVASCRIPT programming language, CONSTRAINT satisfaction, LOGIC programming, COMPUTER software, WEB services, PROLOG (Computer program language)