Securing Web applications

Information Security Technical Report

Volumn 13, Issue 1, 2008, Pages 1-9

  Gollmann, Dieter ^a  

^a HAMBURG UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

Cross side scripting; Cross site request forgery; DNS rebinding attacks; JavaScript hijacking; SQL injection; Web applications security

Indexed keywords

JAVA PROGRAMMING LANGUAGE; SECURITY SYSTEMS; SOFTWARE ENGINEERING; WEB SERVICES;

JAVASCRIPT HIJACKING; SOFTWARE SECURITY; WEB APPLICATION; WEB APPLICATION DEVELOPERS;

SECURITY OF DATA;

EID: 43049179369     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.istr.2008.02.002     Document Type: Article

References (9)

1. Jesse Burns. Cross site reference forgery. Technical report, Information Security Partners, LLC, Version 1.1; 2005.
2. CERT Coordination Center. Malicious HTML tags embedded in client web requests. ; 2000.
3. Brian Chess, Yekaterina Tsipenyuk O'Neil, Jacob West. JavaScript hijacking. Technical report, Fortify Software; 2007.
4. Dean D, Felten EW, Wallach DS. Java security: from HotJava to Netscape and beyond. In: Proceedings of the 1996 IEEE symposium on security and privacy; 1996, p. 190-200.
5. Collin Jackson, Adam Barth, Andrew Bortz, Weidong Shao, Dan Boneh. Protecting browsers from DNS rebinding attacks. In: Proceedings of the 14th ACM conference on computer and communications security; 2007. p. 421-31.
6. Martin J. SessionSafe: implementing XSS immune session handling. In: Gollmann D. (Ed). ESORICS 2006. volume LNCS 4189 (2006), Springer Verlag 444-460
7. Martin Johns. (Somewhat) breaking the same-origin policy by undermining DNS pinning. Posting to the Bug Traq Mailinglist, ; August 2006.
8. Martin J., and Winter J. RequestRodeo: client side protection against session riding. In: Piessens F. (Ed). Proceedings of the OWASP Europe 2006 Conference (May 2006), Departement Computerwetenschappen, Katholieke Universiteit, Leuven 5-17 Report CW448
9. Le Hégaret P, Whitmer R, Wood L. Document object model (DOM). W3C Recommendation, ; January 2005.