A Google Chromium Browser Extension for Detecting XSS Attack in HTML5 Based Websites
| Title | A Google Chromium Browser Extension for Detecting XSS Attack in HTML5 Based Websites |
| Publication Type | Conference Paper |
| Year of Publication | 2018 |
| Authors | Sivanesan, A. P., Mathur, A., Javaid, A. Y. |
| Conference Name | 2018 IEEE International Conference on Electro/Information Technology (EIT) |
| Date Published | May 2018 |
| Publisher | IEEE |
| ISBN Number | 978-1-5386-5398-2 |
| Keywords | attack vectors, attribute abuse, attributes, browser security, Browsers, compositionality, Computer science, cross document messaging, cross-site scripting, cross-site scripting attack, Electronic mail, extensions, Google Chromium browser extension, HTML5 based Web sites, Human Behavior, hypermedia markup languages, input validation, Metrics, online front-ends, pubcrawl, Resiliency, security of data, tags, Tools, Web Browser Security, Web pages, Web sites, XSS attack |
| Abstract | The advent of HTML 5 revives the life of cross-site scripting attack (XSS) in the web. Cross Document Messaging, Local Storage, Attribute Abuse, Input Validation, Inline Multimedia and SVG emerge as likely targets for serious threats. Introduction of various new tags and attributes can be potentially manipulated to exploit the data on a dynamic website. The XSS attack manages to retain a spot in all the OWASP Top 10 security risks released over the past decade and placed in the seventh spot in OWASP Top 10 of 2017. It is known that XSS attempts to execute scripts with untrusted data without proper validation between websites. XSS executes scripts in the victim's browser which can hijack user sessions, deface websites, or redirect the user to the malicious site. This paper focuses on the development of a browser extension for the popular Google Chromium browser that keeps track of various attack vectors. These vectors primarily include tags and attributes of HTML 5 that may be used maliciously. The developed plugin alerts users whenever a possibility of XSS attack is discovered when a user accesses a particular website. |
| URL | https://ieeexplore.ieee.org/document/8500284 |
| DOI | 10.1109/EIT.2018.8500284 |
| Citation Key | sivanesan_google_2018 |
- Human behavior
- XSS attack
- Web sites
- Web pages
- Web Browser Security
- tools
- tags
- security of data
- Resiliency
- pubcrawl
- online front-ends
- Metrics
- input validation
- hypermedia markup languages
- Attack vectors
- HTML5 based Web sites
- Google Chromium browser extension
- extensions
- Electronic mail
- cross-site scripting attack
- cross-site scripting
- cross document messaging
- computer science
- Compositionality
- Browsers
- Browser Security
- Attributes
- attribute abuse