Optimized client side solution for cross site scripting
Siddharth Tiwari, Richa Bansal, Divya Bansal
Abstract
Siddharth Tiwari, Richa Bansal, Divya Bansal
Abstract
The rapid growth of internet resulted in feature rich, dynamic Web applications. This increase in features also introduced completely new underestimated attack vectors. Cross site scripting (XSS) attacks are currently the most exploited security problems in modern Web applications. These attacks make use of vulnerabilities in the code of Web-applications, resulting in serious consequences, such as theft of cookies, passwords and other personal credentials. It is caused by scripts, which do not sanitize user input. Several server-side countermeasures for XSS attacks do exist, but such techniques have not been universally applied, because of their deployment overhead. The existing client-side solutions degrade the performance of client¿s system resulting in a poor Web surfing experience. This paper introduces a client side solution that uses a step by step approach to detect XSS, without degrading much the user¿s Web browsing experience.
OpenAlex reports 8 citations for this work. Citation counts describe recorded attention and do not establish research quality.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
The rapid growth of internet resulted in feature rich, dynamic Web applications. This increase in features also introduced completely new underestimated attack vectors. Cross site scripting (XSS) attacks are currently the most exploited security problems in modern Web applications. These attacks make use of vulnerabilities in the code of Web-applications, resulting in serious consequences, such as theft of cookies, passwords and other personal credentials. It is caused by scripts, which do not sanitize user input. Several server-side countermeasures for XSS attacks do exist, but such techniques have not been universally applied, because of their deployment overhead. The existing client-side solutions degrade the performance of client¿s system resulting in a poor Web surfing experience. This paper introduces a client side solution that uses a step by step approach to detect XSS, without degrading much the user¿s Web browsing experience.
Key concepts: Cross-site scripting, Computer science, Client-side, Computer security, Password, Server-side, Web application, Scripting language