Por favor, use este identificador para citar o enlazar este ítem:
http://hdl.handle.net/10609/1320
Registro completo de metadatos
Campo DC | Valor | Lengua/Idioma |
---|---|---|
dc.contributor.author | Garcia-Alfaro, Joaquin | - |
dc.contributor.author | Navarro-Arribas, Guillermo | - |
dc.contributor.other | Universitat Oberta de Catalunya. K-ryptography and Information Security for Open Networks (KISON) | - |
dc.date.accessioned | 2010-02-16T11:56:43Z | - |
dc.date.available | 2010-02-16T11:56:43Z | - |
dc.date.issued | 2007 | - |
dc.identifier.citation | GARCIA-ALFARO, J.; NAVARRO, G. (2007). "Prevention of Cross-Site Scripting Attacks on Current Web Applications". Lecture Notes in Computer Science. 4804, p. 1.770-1.784. ISSN: 0302-9743. | - |
dc.identifier.issn | 0302-9743MIAR | - |
dc.identifier.uri | http://hdl.handle.net/10609/1320 | - |
dc.description.abstract | Security is becoming one of the major concerns for web applications and other Internet based services, which are becoming pervasive in all kinds of business models and organizations. Web applications must therefore include, in addition to the expected value offered to their users, reliable mechanisms to ensure their security. In this paper, we focus on the specific problem of preventing cross-site scripting attacks against web applications. We present a study of this kind of attacks, and survey current approaches for their prevention. The advantages and limitations of each proposal are discussed, and an alternative solution is introduced. Our proposition is based on the use of X.509 certificates, and XACML for the expression of authorization policies. By using our solution, developers and/or administrators of a given web application can specifically express its security requirements from the server side, and require the proper enforcement of such requirements on a compliant client. This strategy is seamlessly integrated in generic web applications by relaying in the SSL and secure redirect calls. | en |
dc.format.mimetype | application/pdf | - |
dc.language.iso | eng | - |
dc.rights | The original publication is available at http://www.springerlink.com/content/e9057385714r6171 | - |
dc.subject.lcsh | Internet -- Security measures | en |
dc.subject.lcsh | Computer networks -- Security measures | en |
dc.subject.lcsh | Computer security | en |
dc.title | Prevention of Cross-Site Scripting Attacks on Current Web Applications | - |
dc.type | info:eu-repo/semantics/article | - |
dc.audience.mediator | Theme areas::Computer Science, Technology and Multimedia | en |
dc.subject.lemac | Internet -- Mesures de seguretat | ca |
dc.subject.lemac | Ordinadors, Xarxes d' -- Mesures de seguretat | ca |
dc.subject.lemac | Informàtica -- Mesures de seguretat | ca |
dc.subject.lcshes | Internet -- Medidas de seguridad | es |
dc.subject.lcshes | Ordenadores, Redes de -- Medidas de seguridad | es |
dc.subject.lcshes | Informática -- Medidas de seguridad | es |
dc.identifier.doi | 10.1007/978-3-540-76843-2_45 | - |
dc.gir.id | AR/0000001633 | - |
Aparece en las colecciones: | Articles cientÍfics Articles |
Ficheros en este ítem:
Fichero | Descripción | Tamaño | Formato | |
---|---|---|---|---|
GarciaAlfaro_LNCS2007_Prevention.pdf | 138,52 kB | Adobe PDF | Visualizar/Abrir |
Comparte:
Los ítems del Repositorio están protegidos por copyright, con todos los derechos reservados, a menos que se indique lo contrario.