An Efficient Detecting Mechanism for Cross-Site Script Attacks in the Cloud
Cloud computing is one of the most prospect technologies due to its flexibility and low-cost usage. Several security issues in the cloud are raised by researchers. Cross-site script (XSS) attack is one of the most threats in the Internet. In the past, the
- PDF / 2,383,330 Bytes
- 10 Pages / 439.37 x 666.142 pts Page_size
- 87 Downloads / 150 Views
Abstract Cloud computing is one of the most prospect technologies due to its flexibility and low-cost usage. Several security issues in the cloud are raised by researchers. Cross-site script (XSS) attack is one of the most threats in the Internet. In the past, there are many literatures for detecting XSS attacks were proposed. Unfortunately, fewer studies focus on the detection of XSS attacks in the cloud. In this paper, we propose a mechanism to detect XSS attacks in cloud environments. The framework is also presented. In particular, our mechanism is not need to modify browsers and applications. We demonstrate our mechanism has higher accuracy rate and lower impact on performance of applications in the experiment. It sufficiently shows our mechanism is suitable for real-time detection in XSS attacks for cloud environments. Keywords XSS attack
Cloud computing Detection Real-time
W. Kan T.-Y. Wu (&) T. Han C.-W. Lin C.-M. Chen J.-S. Pan Innovative Information Industry Research Center, Shenzhen Graduate School, Harbin Institute of Technology, Shenzhen 518055, China e-mail: [email protected] W. Kan e-mail: [email protected] T. Han e-mail: [email protected] C.-W. Lin e-mail: [email protected] C.-M. Chen e-mail: [email protected] J.-S. Pan e-mail: [email protected] C.-W. Lin C.-M. Chen J.-S. Pan Shenzhen Key Laboratory of Internet Information Collaboration, Shenzhen 518055, China
Y.-M. Huang et al. (eds.), Advanced Technologies, Embedded and Multimedia for Human-centric Computing, Lecture Notes in Electrical Engineering 260, DOI: 10.1007/978-94-007-7262-5_76, Springer Science+Business Media Dordrecht 2014
663
664
W. Kan et al.
Introduction Nowadays, cloud computing is obviously one of the most prospect technologies due to its flexibility and low-cost usage. Different from the traditional Internet environments, enterprises can exempt from building expensive infrastructure by the cloud techniques. Hence, many IT companies deploy their web applications into the cloud environments. As we all know, the cloud environments are based on the Internet. Hence, the threats in the traditional Internet environments still exist in the cloud environments. Cross-site script (XSS) attack is one of the most threats in the Internet. It can grab the user’s privacy information and leads other attacks such as fishing, SQL injection, and DDoS. This attack is caused by the script language embed into web applications. In general, the web applications are adopted HTML language, script language, hyperlinks, and other languages to provide resources operating and interaction between the client and the server. However, these languages and methods lead web applications are vulnerable to XSS attacks. Typically, the XSS attack contains the three attacks models: (1) Reflected XSS, (2) Stored XSS, and (3) Dom-based XSS. Up to now, several approaches were proposed to prevent XSS attack such as static analysis [1–3], black-white list [4], taint and flow analysis [5–8], string injection [9–12], machine learning [
Data Loading...
