Behavior-based anomaly detection on the server side to reduce the effectiveness of Cross Site Scripting vulnerabilities

摘要：

Cross-site Scripting (XSS) is the top most vulnerability in the web applications as mentioned by research groups. Every day new evasion mechanisms are found by the hackers due to new technology, new html tags and script functionalities introduced. Zero-day attacks exploit the vulnerability before the fix could be issued to protect the web application users. This demands an efficient approach on the server side to protect the users of the application. The proposed behavior based anomaly detection approach introduces a security layer on top of the web application, so that the existing web application remain unchanged whenever a new threat is introduced that demands new security mechanisms. Further application level parameters are introduced to reduce the processing time.

关键词： Application-level web Security cross-site scripting security vulnerabilities.

作者: Jayamsakthi Shanmugam M.Ponnavaikko

作者单位: Research Student, BITS, Pilani Director of Research and Virtual Education, SRM University, Chennai

会议类型: 国际会议

会议名称: 2007年第三届语义和知识网格国际会议(Third International Conference on Semantics,Knowledge,and Grid)(SKG 2007)

会议地点: 西安

会议语种:英文

在线出版日期: 2007-10-29（万方平台首次上网日期，不代表论文的发表时间）