XHUNTER: Tracking XSS on the Net

Ziel

"Code-injection attacks through Cross-Site Scripting (XSS) in the web browser
have observed a significant increase over the previous years. According to a
September-2009 report published by the SANS Institute, attacks against web
applications constitute more than 60% of the total attack attempts observed on
the Internet. Web application vulnerabilities such as SQL injection and
Cross-Site Scripting flaws in open-source as well as custom-built applications
account for more than 80% of the vulnerabilities being discovered. In this
project we propose the design and development of a prototype that can inspect
passively the network for extracting URLs that can potentially exploit a web
application, through XSS. The detector assumes that all URLs that contain
parts that can produce a valid JavaScript syntax tree are considered
suspicious. We will develop tools that identify text fragments of URLs,
exchanged in the network, that produce a valid JavaScript syntax-tree of high
depth. These URLs are considered as possible XSS exploitation attempts."

Wissenschaftliches Gebiet

Koordinator

IDRYMA TECHNOLOGIAS KAI EREVNAS

EU-Beitrag

€ 219 392,80

Adresse

N PLASTIRA STR 100
70013 Irakleio
Griechenland

Region

Νησιά Αιγαίου Κρήτη Ηράκλειο

Aktivitätstyp

Research Organisations

Kontakt Verwaltung

Evangelos Markatos (Prof.)

Links

Die Organisation kontaktieren Website

Gesamtkosten

Keine Daten

Ziel

Wissenschaftliches Gebiet

Programm/Programme

Thema/Themen

Aufforderung zur Vorschlagseinreichung

Finanzierungsplan

Koordinator

Diese Seite teilen

Herunterladen