NDLI: Cross-Site Scripting (XSS) attacks and defense mechanisms: classification and state-of-the-art

Content Provider	Springer Nature Link
Author	Gupta, Shashank Gupta, B. B.
Copyright Year	2015
Abstract	Nowadays, web applications are becoming one of the standard platforms for representing data and service releases over the World Wide Web. Since web applications are progressively more utilized for security-critical services, therefore they have turned out to be a well-liked and precious target for the web-related vulnerabilities. Even though several defensive mechanisms have been building up to reinforce the modern web applications and alleviate the attacks instigated against them. We have analyzed the major concerns for web applications and Internet-based services which are persistent in several web applications of diverse organizations like banking, health care, financial service, retail and so on by the referring the Website Security Statistics Report of White Hat Security. In this paper, we highlight some of the serious vulnerabilities found in the modern web applications and revealed various serious vulnerabilities. Cross-Site Scripting (XSS) attack is the top most vulnerability found in the today’s web applications which to be a plague for the modern web applications. XSS attacks permit an attacker to execute the malicious scripts on the victim’s web browser resulting in various side-effects such as data compromise, stealing of cookies, passwords, credit card numbers etc. We have also discussed a high level of taxonomy of XSS attacks and detailed incidences of these attacks on web applications. A detailed comprehensive analysis of the exploitation, detection and prevention mechanisms of XSS attacks has also been discussed. Based on explored strength and flaws of these mechanisms, we have discussed some further work.
Starting Page	512
Ending Page	530
Page Count	19
File Format	PDF
ISSN	09756809
Journal	International Journal of System Assurance Engineering and Management
Volume Number	8
Issue Number	1
e-ISSN	09764348
Language	English
Publisher	Springer India
Publisher Date	2015-09-14
Publisher Place	New Delhi
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Cross-Site Scripting (XSS) White Hat Security Internet World Wide Web (WWW) JavaScript code injection attacks Malicious JavaScript Quality Control, Reliability, Safety and Risk Engineering Economics, Organization, Logistics, Marketing
Content Type	Text
Resource Type	Article
Subject	Strategy and Management Safety, Risk, Reliability and Quality

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

XSS-SAFE: A Server-Side Approach to Detect and Mitigate Cross-Site Scripting (XSS) Attacks in JavaScript Code

Detection of Web Cross-Site Scripting (XSS) Attacks

Defending against Cross-Site Scripting Attacks

SECSIX: security engine for CSRF, SQL injection and XSS attacks

Integrated approach to prevent SQL injection attack and reflected cross site scripting attack

Cross Channel Scripting and Code Injection Attacks on Web and Cloud-Based Applications: A Comprehensive Review

Modeling Cross-Site Scripting (XSS) Attacks, and Studying the Effect of Changing Attack Attributes on Defense Techniques.

Application of non-decimated wavelet packet transfer function in web error prediction

A Unified Framework for Detecting and Notifying the SQL Injection XSS and Malicious URL Attacks

Cross-Site Scripting (XSS) attacks and defense mechanisms: classification and state-of-the-art

Similar Documents

XSS-SAFE: A Server-Side Approach to Detect and Mitigate Cross-Site Scripting (XSS) Attacks in JavaScript Code

Detection of Web Cross-Site Scripting (XSS) Attacks

Defending against Cross-Site Scripting Attacks

SECSIX: security engine for CSRF, SQL injection and XSS attacks

Integrated approach to prevent SQL injection attack and reflected cross site scripting attack

Cross Channel Scripting and Code Injection Attacks on Web and Cloud-Based Applications: A Comprehensive Review

Modeling Cross-Site Scripting (XSS) Attacks, and Studying the Effect of Changing Attack Attributes on Defense Techniques.

Application of non-decimated wavelet packet transfer function in web error prediction

A Unified Framework for Detecting and Notifying the SQL Injection XSS and Malicious URL Attacks

Cross-Site Scripting (XSS) attacks and defense mechanisms: classification and state-of-the-art