Cross-Site Scripting (XSS) attacks and defense mechanisms: classification and state-of-the-art

Gupta, Shashank; Gupta, Brij B.

doi:10.1007/s13198-015-0376-0

Cited by 166 publications

(90 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…According to the 10 leading vulnerabilities rankings presented by the Open Web Application Security Project (OWASP), the XSS vulnerability can be termed among the top web application vulnerabilities [2,4]. Shar and Tan [9] employed the static analysis methodology on Java web applications.…”

Section: Related Workmentioning

confidence: 99%

“…XSS can trigger major damages for the user or at the site by inserting the malicious scripts into the place where a web application admits user inputs. Inputs that are invalidated can cause transferring of private data, and stealing of cookies and user accounts [2,4]. In other words, the XSS flaw is triggered by un-sanitised or un-validated input parameters.…”

Section: Cross-site Scripting (Xss)mentioning

confidence: 99%

“…The reason for these security holes is mainly the short time frame of this program"s development [1]. Although research on security programs is modern, effective solutions are highly demanded because of the importance of creating programs that are secure and less vulnerable to attacks [2,3].…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Web Security: Detection of Cross Site Scripting in PHP Web Application using Genetic Algorithm

Marashdih¹,

Zaaba²,

Omer³

2017

ijacsa

View full text Add to dashboard Cite

Abstract-Cross site scripting (XSS) is one of the major threats to the web application security, where the research is still underway for an effective and useful way to analyse the source code of web application and removes this threat. XSS occurs by injecting the malicious scripts into web application and it can lead to significant violations at the site or for the user. Several solutions have been recommended for their detection. However, their results do not appear to be effective enough to resolve the issue. This paper recommended a methodology for the detection of XSS from the PHP web application using genetic algorithm (GA) and static analysis. The methodology enhances the earlier approaches of determining XSS vulnerability in the web application by eliminating the infeasible paths from the control flow graph (CFG). This aids in reducing the false positive rate in the outcomes. The results of the experiments indicated that our methodology is more effectual in detecting XSS vulnerability from the PHP web application compared to the earlier studies, in terms of the false positive rates and the concrete susceptible paths determined by GA Generator.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Cross-site Scripting (Xss)mentioning

confidence: 99%

See 1 more Smart Citation

Web Security: Detection of Cross Site Scripting in PHP Web Application using Genetic Algorithm

Marashdih¹,

Zaaba²,

Omer³

2017

ijacsa

View full text Add to dashboard Cite

show abstract

“…The report gives information about the number of vulnerabilities for every web technology [17]. A study covering the entire web applications noted that XSS accounts for 25 percent of the vulnerabilities [18]. [18] XSS offers an opening to the invader or hacker to enter the webserver database, mutilate websites, seize the web browser of a user remotely, and compel him/her to take an unfamiliar route [18].…”

Section: Web Application Securitymentioning

confidence: 99%

“…A study covering the entire web applications noted that XSS accounts for 25 percent of the vulnerabilities [18]. [18] XSS offers an opening to the invader or hacker to enter the webserver database, mutilate websites, seize the web browser of a user remotely, and compel him/her to take an unfamiliar route [18]. Veracode's state of software security report emphasised on application development and scrutinised over 200,000 individual applications from the period October 2013 to March 2015 [16].…”

Section: Web Application Securitymentioning

confidence: 99%

Cross Site Scripting: Detection Approaches in Web Application

Wasef¹,

Fitri²

2016

ijacsa

View full text Add to dashboard Cite

Abstract-Web applications have become one of the standard platforms for service releases and representing information and data over the World Wide Web. Thus, security vulnerabilities headed to various type of attacks in web applications. Amongst those is Cross Site Scripting also known as XSS. XSS can be considered as one of the most popular type of threat in web security application. XSS occurs by injecting the malicious scripts into web application, and it can lead to significant violations at the site or for the user. This paper highlights the issues (i.e. security and vulnerability) in web application specifically in regards to XSS. In addition, the future direction of research within this domain is highlighted.

show abstract

A Detailed Review on Security Issues in Layered Architectures and Distributed Denial Service of Attacks Over IoT Environment

Ganesarathinam,

Singaravelu,

Padma Pooja

2022

Cyber‐Physical Systems

View full text Add to dashboard Cite

Cross-Site Scripting (XSS) attacks and defense mechanisms: classification and state-of-the-art

Cited by 166 publications

References 27 publications

Web Security: Detection of Cross Site Scripting in PHP Web Application using Genetic Algorithm

Web Security: Detection of Cross Site Scripting in PHP Web Application using Genetic Algorithm

Cross Site Scripting: Detection Approaches in Web Application

A Detailed Review on Security Issues in Layered Architectures and Distributed Denial Service of Attacks Over IoT Environment

Contact Info

Product

Resources

About