Moving Target Defense Against Cross-Site Scripting Attacks (Position Paper)

Joe Portner,Bill Chu,Joel Kerr

doi:10.1007/978-3-319-17040-4_6

Moving Target Defense Against Cross-Site Scripting Attacks (Position Paper)

Joe Portner, Bill Chu + Show 1 more

https://doi.org/10.1007/978-3-319-17040-4_6

Copy DOI

Publication Date: Jan 1, 2015

Citations: 8

Affiliation: University of North Carolina at Charlotte

#Cross-Site Scripting Attacks #Content Security Policy + Show 8 more

Abstract
Full-Text PDF
Similar Papers

Abstract

We present a new method to defend against cross-site scripting (XSS) attacks. Our approach is based on mutating symbols in the JavaScript language and leveraging commonly used load-balancing mechanisms to deliver multiple copies of a website using different versions of the JavaScript language. A XSS attack that injects unauthorized JavaScript code can thus be easily detected. Our solution achieves similar benefits in XSS protection as Content Security Policy (CSP), a leading web standard to prevent cross site scripting, but can be much more easily adopted because refactoring of websites is not required.

Full Text