Browser's defenses against reflected cross-site scripting attacks

Mewara, Bhawna; Bairwa, Sheetal; Gajrani, Jyoti

doi:10.1109/icspct.2014.6884928

Cited by 6 publications

(6 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In [5], the limitations of anti-XSS approach implemented in different browsers for reflected XSS attacks against several categories of vulnerabilities are addressed properly and witnessed that Mozilla Firefox with XSS-Me discovers greater percentage of exploits than other browsers. To defend against the discovered exploits in this add-on, this paper proposes a blocking technique so that it can be treated as a propitious anti-XSS filter, if integrated inside the browser instead being applied as an extension.…”

Section: Approach Of Xss-mementioning

confidence: 99%

“…Furthermore, how and what part of the parameter is perilous to forward to provide response to the web browser. Therefore, for the identification of malicious code, XSS-Me is the best in its work as discussed in [5]. The challenging part of our contribution is to recognize and stop the execution of the malicious parameters.…”

Section: Proposed Defense Mechanismmentioning

confidence: 99%

“…After having a thorough explanation of XSS-Me in [5], the detailed approach of XSS-Me to detect XSS vulnerability in a web application is as shown in Fig. 2.…”

Section: Approach Of Xss-mementioning

confidence: 99%

“…This paper uses a different strategy to stop malicious strings by identifying the vulnerable portion of inputs being used in black-box testing and the limitations identified in [5] are mapped to the flaws in the strategies being used. These tools comfort developers to easily identify SQL and XSS injection susceptibilities.…”

Section: Introductionmentioning

confidence: 99%

“…On this ground, in [5], client side defenses used by latest versions of popularly used browsers for defending against reflected XSS are assessed. The paper witnesses some effective results for Mozilla Firefox after installing an add-on named XSS-Me.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Enhanced browser defense for reflected Cross-Site Scripting

Mewara¹,

Bairwa²,

Gajrani³

et al. 2014

Proceedings of 3rd International Conference on Reliability, Infocom Technologies and Optimization

Self Cite

View full text Add to dashboard Cite

Cross-Site Scripting (XSS) is a common attack technique that lets attackers insert the code in the output application of web page which is referred to the web browser of visitor and then the inserted code executes automatically and steals the sensitive information. In order to prevent the users from XSS attack, many client-side solutions have been implemented; most of them being used are the filters that sanitize the malicious input. However, many of these filters do not provide prevention to the newly designed sophisticated attacks such as multiple points of injection, injection into script etc. This paper proposes and implements an approach based on encoding unfiltered reflections for detecting vulnerable web applications which can be exploited using above mentioned sophisticated attacks. Results prove that the proposed approach provides accurate higher detection rate of exploits. In addition to this, an implementation of blocking the execution of malicious scripts have contributed to XSS-Me: an open source Mozilla Firefox security extension that detects for reflected XSS vulnerabilities which can be considered as an effective solution if it is integrated inside the browser rather than being enforced as an extension.

show abstract

Section: Approach Of Xss-mementioning

confidence: 99%

Section: Proposed Defense Mechanismmentioning

confidence: 99%

“…After having a thorough explanation of XSS-Me in [5], the detailed approach of XSS-Me to detect XSS vulnerability in a web application is as shown in Fig. 2.…”

Section: Approach Of Xss-mementioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations