DocumentCode :
695495
Title :
Handling cross site scripting attacks using cache check to reduce webpage rendering time with elimination of sanitization and filtering in light weight mobile web browser
Author :
Panja, Biswajit ; Gennarelli, Tyler ; Meharia, Priyanka
Author_Institution :
Univ. of Michigan-Flint Flint, Flint, MI, USA
fYear :
2015
fDate :
20-21 Feb. 2015
Firstpage :
1
Lastpage :
7
Abstract :
In this paper we propose a new approach to prevent and detect potential cross-site scripting attacks. Our method called Buffer Based Cache Check, will utilize both the server-side as well as the client-side to detect and prevent XSS attacks and will require modification of both in order to function correctly. With Cache Check, instead of the server supplying a complete whitelist of all the known trusted scripts to the mobile browser every time a page is requested, the server will instead store a cache that contains a validated “trusted” instance of the last time the page was rendered that can be checked against the requested page for inconsistencies. We believe that with our proposed method that rendering times in mobile browsers will be significantly reduced as part of the checking is done via the server, and fewer checking within the mobile browser which is slower than the server. With our method the entire checking process isn´t dumped onto the mobile browser and as a result the mobile browser should be able to render pages faster as it is only checking for “untrusted” content whereas with other approaches, every single line of code is checked by the mobile browser, which increases rendering times.
Keywords :
cache storage; client-server systems; mobile computing; online front-ends; security of data; trusted computing; Web page rendering time; XSS attacks; buffer based cache check; client-side; cross-site scripting attacks; filtering; light weight mobile Web browser; sanitization; server-side; trusted instance; untrusted content; Browsers; Filtering; Mobile communication; Radio access networks; Rendering (computer graphics); Security; Servers; Cross site scripting; cache check; mobile browser; webpage rendering;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Mobile and Secure Services (MOBISECSERV), 2015 First Conference on
Conference_Location :
Gainesville, FL
Type :
conf
DOI :
10.1109/MOBISECSERV.2015.7072878
Filename :
7072878
Link To Document :
بازگشت