A XSS vulnerability detection approach based on simulating browser behavior - 文章详情页

作者：

Liu, Y. (Liu, Y..) | Zhao, W. (Zhao, W..) | Wang, D. (Wang, D..) | Fu, L. (Fu, L..)

收录：

Scopus

摘要：

This　paper　presents　a　dynamic　detection　method　based　on　simulating　browser　behavior,　and　designs　a　web　crawler　based　on　a　headless　browser,　which　can　interpret　the　JavaScript　code　and　retrieve　Ajax　content　to　find　the　hidden　injection　points　in　pages,　with　full　consideration　of　the　web　pages　containing　complex　scripts　under　Web　2.0　environment.　In　implementation,　this　paper　uses　dynamic　analysis　in　XSS　vulnerability　detection　by　examining　the　runtime　behavior　of　web　application,　and　decide　whether　the　XSS　vulnerability　exists　with　black-box　test.　The　experiment　results　prove　that　this　method　works.　©　2015　IEEE.

关键词：

Black-box test; Crawler; Simulating Browser; XSS vulnerability

作者机构：

[ 1 ] [Liu, Y.]College of Computer Science, Beijing University of Technology, Beijing, 100124, China
[ 2 ] [Zhao, W.]College of Computer Science, Beijing University of Technology, Beijing, 100124, China
[ 3 ] [Wang, D.]College of Computer Science, Beijing University of Technology, Beijing, 100124, China
[ 4 ] [Fu, L.]College of Computer Science, Beijing University of Technology, Beijing, 100124, China

通讯作者信息：

电子邮件地址：

查看成果更多字段

成果类型
所属机构

所有年份指定年份从至