Designing a XSS Defensive Framework for Web Servers Deployed in the Existing Smart City Infrastructure

Cross-site scripting is one of the notable exceptions effecting almost every web application. Hence, this article proposed a framework to negate the impact of the XSS attack on web servers deployed in one of the major applications of the Internet of Things (IoT) i.e. the smart city environment. The...

Celý popis

Uloženo v:
Podrobná bibliografie
Vydáno v:Journal of organizational and end user computing Ročník 32; číslo 4; s. 85 - 111
Hlavní autoři: Gupta, Shashank, Gupta, Brij B, Chaudhary, Pooja
Médium: Journal Article
Jazyk:angličtina
Vydáno: Hershey IGI Global 01.10.2020
Témata:
Application
Applications programs
Computer worms
Exceptions
Frame analysis
Infrastructure
Internet
Internet of Things
Internet software
Mitigation
Prototypes
Servers
Smart cities
Software
Tracking
Web applications
Websites
India
ISSN:1546-2234, 1546-5012
On-line přístup:Získat plný text
Tagy: Přidat tag
Žádné tagy, Buďte první, kdo vytvoří štítek k tomuto záznamu!
Popis
Shrnutí:Cross-site scripting is one of the notable exceptions effecting almost every web application. Hence, this article proposed a framework to negate the impact of the XSS attack on web servers deployed in one of the major applications of the Internet of Things (IoT) i.e. the smart city environment. The proposed framework implements 2 approaches: first, it executes vulnerable flow tracking for filtering injected malicious scripting code in dynamic web pages. Second, it accomplished trusted remark generation and validation for unveiling any suspicious activity in static web pages. Finally, the filtered and modified webpage is interfaced to the user. The prototype of the framework has been evaluated on a suite of real-world web applications to detect XSS attack mitigation capability. The performance analysis of the framework has revealed that this framework recognizes the XSS worms with very low false positives, false negatives and acceptable performance overhead as compared to existent XSS defensive methodologies.
Bibliografie:ObjectType-Article-1
SourceType-Scholarly Journals-1
ObjectType-Feature-2
content type line 14
ISSN:1546-2234
1546-5012
DOI:10.4018/JOEUC.2020100105