2008•Unpublished venueRequires access

Optimized client side solution for cross site scripting

Siddharth Tiwari, Richa Bansal, Divya Bansal

Open publisher page 8 citations

Abstract

The rapid growth of internet resulted in feature rich, dynamic Web applications. This increase in features also introduced completely new underestimated attack vectors. Cross site scripting (XSS) attacks are currently the most exploited security problems in modern Web applications. These attacks make use of vulnerabilities in the code of Web-applications, resulting in serious consequences, such as theft of cookies, passwords and other personal credentials. It is caused by scripts, which do not sanitize user input. Several server-side countermeasures for XSS attacks do exist, but such techniques have not been universally applied, because of their deployment overhead. The existing client-side solutions degrade the performance of client¿s system resulting in a poor Web surfing experience. This paper introduces a client side solution that uses a step by step approach to detect XSS, without degrading much the user¿s Web browsing experience.

About this research paper

What this paper is about

The rapid growth of internet resulted in feature rich, dynamic Web applications. This increase in features also introduced completely new underestimated attack vectors. Cross site scripting (XSS) attacks are currently the most exploited security problems in modern Web applications. These attacks make use of vulnerabilities in the code of Web-applications, resulting in serious consequences, such as theft of cookies, passwords and other personal credentials. It is caused by scripts, which do not sanitize user input. Several server-side countermeasures for XSS attacks do exist, but such techniques have not been universally applied, because of their deployment overhead. The existing client-side solutions degrade the performance of client¿s system resulting in a poor Web surfing experience. This paper introduces a client side solution that uses a step by step approach to detect XSS, without degrading much the user¿s Web browsing experience.

Why it matters

OpenAlex reports 8 citations for this work. Citation counts describe recorded attention and do not establish research quality.

Key contribution

A contribution statement is not available in the OpenAlex record.

Method / approach

Method details are not available in the OpenAlex metadata.

Main findings

Findings are not separately available in the OpenAlex metadata.

Limitations

Limitations are not available in the OpenAlex metadata.

Applications

Application details are not available in the OpenAlex metadata.

Available abstract

The rapid growth of internet resulted in feature rich, dynamic Web applications. This increase in features also introduced completely new underestimated attack vectors. Cross site scripting (XSS) attacks are currently the most exploited security problems in modern Web applications. These attacks make use of vulnerabilities in the code of Web-applications, resulting in serious consequences, such as theft of cookies, passwords and other personal credentials. It is caused by scripts, which do not sanitize user input. Several server-side countermeasures for XSS attacks do exist, but such techniques have not been universally applied, because of their deployment overhead. The existing client-side solutions degrade the performance of client¿s system resulting in a poor Web surfing experience. This paper introduces a client side solution that uses a step by step approach to detect XSS, without degrading much the user¿s Web browsing experience.

Key concepts: Cross-site scripting, Computer science, Client-side, Computer security, Password, Server-side, Web application, Scripting language

Related papers

Back to paper searchBrowse research topicsOriginal source
Optimized client side solution for cross site scripting — Research Paper | ScholarLens