Programming Languages White Papers
Using Static Analysis for Ajax Intrusion Detection
Overview This paper presents a static control-flow analysis for JavaScript programs running in a web browser. The analysis tackles numerous challenges posed by modern web applications including asynchronous communication, frameworks, and dynamic code generation. The paper uses the analysis to extract a model of expected client behavior as seen from the server, and build an intrusion-prevention proxy for the server: the proxy intercepts client requests and disables those that do not meet the expected behavior. The paper inserts random asynchronous requests to foil mimicry attacks. Finally, the paper evaluates the technique against several real applications and show that it protects against an attack in a widely-used web application.
| Publisher | Association for Computing Machinery | File Format | |
|---|---|---|---|
| Date Published | April 2009 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 1 out of 2 users found this white paper useful
White Paper RSSCitizants: Bringing IT In-House
DownloadCitizant enhances IT flexibility and scalability by creating a virtualized Dell infrastructure that will pay for itself in 18 months.
Designing High Availability for Internet Information Services
End downtime forever! - Organizations today are relying more and more on Web services for the implementation of mission-critical applications. With the advent of Service-Oriented Architectures (SOAs),which make extensive use...
Five JavaScript Frameworks: A Point-by-Point Comparison
There are a multitude of JavaScript frameworks available today for programming rich client-side interactions in web applications. With many such different options, it is important to choose a framework that...
Increase Reliability with IBM WebSphere File Transfer Edition (FTE)
"Does your organization still use FTP software? Did you know these links require 3 to 4 times more time and effort to build and maintain versus SOA-based Application Integration projects?...
Energy Monitoring Firm Saves Money, Scales Business With Hosted Computing Platform
Advanced Telemetry develops systems to help businesses monitor and control energy usage, onsite or via the Internet. The company employees 22 people. Advanced Telemetry needed a cost-effective way to scale...
