NDLI: ProClick: a framework for testing clickjacking attacks in web applications

Please wait, while we are loading the content...

Information security, risk governance and management frameworks: an overview of COBIT 5

Analysis of GOST 28147-89 security: methods and algorithms

Attacks on implementations of cryptographic algorithms: side-channel and fault attacks

Trusting SSL in practice

The SHA-3 competition: lessons learned

Security and protection of SCADA: a bigdata algorithmic approach

Social engineering attacks on the knowledge worker

Conviction model for incident reaction architecture monitoring based on automatic sensors alert detection

S-box construction from non-permutation power functions

Obligations to enforce prohibitions: on the adequacy of security policies

Authenticated key agreement in wireless networks with automated key management

On authentication factors: "what you can" and "how you do it"

Secure and practical threshold RSA

Counterfeiting attacks on block-wise dependent fragile watermarking schemes

An authentication framework for peer-to-peer cloud

Verification of OSPF vulnerabilities by colored Petri net

SAT based analysis of LTE stream cipher ZUC

Generalized approach to modeling user activity graphs for network security and public safety monitoring

Efficient and robust data aggregation using untrusted infrastructure

Biometric verification using brain waves toward on-demand user management systems: performance differences between divided regions in α -- β wave band

Continuous security evaluation and auditing of remote platforms by combining trusted computing and security automation techniques

ProClick: a framework for testing clickjacking attacks in web applications

AndroSimilar: robust statistical feature signature for Android malware detection

Robust periocular recognition by fusing local to holistic sparse representations

Cryptanalysis of RC4(n, m) stream cipher

Blinded additively homomorphic encryption schemes for self-tallying voting

Analysing attribute aggregation models in federated identity management

Impact analysis of JellyFish attack on TCP-based mobile ad-hoc networks

A flexible framework for detecting IPv6 vulnerabilities

Exploring attack vectors facilitated by miniaturized computers

Using transition systems to model and verify the implementation of security protocol

Privacy and security in IPv6 networks: challenges and possible solutions

Designing flexible access control models for the cloud

MAIL: Malware Analysis Intermediate Language: a step towards automating and optimizing malware detection

Anonymity and privacy in multicast mobile ad hoc networks

Metamodel for reputation based agents system: case study for electrical distribution SCADA design

Countering AES static s-box attack

Social access control language (SocACL)

A possibilistic approach to intrusion detection under imperfect logging protocol

Hand shape recognition using Hu and Legendre moments

An HBAC-based approximation for IBAC programs

An access control framework for hybrid policies

An empirical study of three access control systems

Joux multicollisions attack in sponge construction

Digital camera identification system

Complexity measurement of a password for keystroke dynamics: preliminary study

An improved fault-tolerant conference-key agreement protocol with forward secrecy

Nature inspired heuristics for attack of simplified DES algorithm

The darker side of Firefox extension

A review on cloud security

CGA integration into IPsec/IKEv2 authentication

Secure true random number generator in WLAN/LAN

Public key infrastructure for UAE: a case study

Information protection systems based on universal knapsack problem

Expert key selection impact on the MANETs' performance using probabilistic key management algorithm

Influence of S-Boxes to the resistance of GOST algorithm against linear cryptanalysis

Security policy verification in grid systems

Visual steganalysis of LSB-encoded audio data based on frequency domain characteristics

Authorized! access denied, unauthorized! access granted

A finite transition model for security protocol verification

Development of a secure cluster-based wireless sensor network model

Content-location based key management scheme for content centric networks

About responsibilities distribution for information security

A clique-based method for mining fuzzy graph patterns in anti-money laundering systems

A novel approach for dynamic authorisation planning in constrained workflow systems

Features extraction of fingerprints using firefly algorithm

Performance analysis of the developed mandatory access control system in the DBMS

A protocol for simultaneous use of confidentiality and integrity in large-scale storage systems

Using quadrocopter as a pentest tool

EndNote vs Zotero in searching library catalog via Z39.50 of academic libraries in Thailand

Improved face recognition at a distance using light field camera & super resolution schemes

Building of mathematical model of flow data processing system based on given selection of elements of the set

D0M-WLAN: a traffic analysis based approach for detecting malicious activities on wireless networks

Securing the virtual machine images in cloud computing

Implementing real-time transactional security property using timed edit automata

Development the method of detection the malicious pages interconnection in the internet

A novel threshold-based scan detection method using genetic algorithm

Towards a dynamic authorisation planning satisfying intra-instance and inter-instance constraints

On designing automatic reaction strategy for critical infrastructure SCADA system

The method of the information security risk assessment in cloud computing systems

Preventing malicious data harvesting from deallocated memory areas

Linking business goals to information security plans and activities

Addressing security challenges in WiMAX environment

Improbable differential cryptanalysis

Insecurities within browser: issues and challenges

Security vulnerabilities and mitigation techniques of web applications

Security through human-factors and biometrics

Multidisciplinary prospective in cryptology

Industry program panel

ProClick: a framework for testing clickjacking attacks in web applications

Content Provider	ACM Digital Library
Author	Devendran, Vamshee Krishna Haddad, Hisham Shahriar, Hossain
Abstract	Clickjacking attacks are an emerging threat on the web. An attacker application presents a User Interface (UI) element of a target application out of context, such as hiding sensitive UI element by making it transparent to the end user. The user is tricked to click on the hidden element out of context. These attacks can cause severe damages such as compromising webcams and posting unintended messages. A large number of websites are still vulnerable to clickjacking and have no minimal protection at the server side (e.g., frame busting, X-Frame-Options header). Further, client-side defense techniques have been ineffective to deal with sophisticated clickjacking attack types and suffer from performance issues. This paper presents a proxy-level framework, ProClick, to detect clickjacking attacks. ProClick examines the content of requests and response pages at the proxy level to detect clickjacking attacks. We evaluate the proposed approach with a set of legitimate and malicious websites. The results indicate that our approach has low false positive and false negative rates. The overhead imposed by the proposed approach is also very negligible.
Starting Page	144
Ending Page	151
Page Count	8
File Format	PDF
ISBN	9781450324984
DOI	10.1145/2523514.2523538
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2013-11-26
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Iframe Ui redressing Proxy Clickjacking X-frame-options Proclick
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in