Skip to content
Snippets Groups Projects
Commit fe39b6b4 authored by Vakama's avatar Vakama
Browse files

small update for thesis

parent 44dba03d
No related branches found
No related tags found
No related merge requests found
No preview for this file type
No preview for this file type
......@@ -56,7 +56,7 @@
\begin{abstract}
Cross-site scripting (XSS) attack is a computer vulnerability that allow attacker to insert their own script to the web page to modify the web page in a way they want. By using XSS attack, attacker can modified the web page, stealing information from user, etc. These days, developer usually fix known XS vulnerabilities before been attack, or clean up the suspicious input using firewall before it send to the server. Both approach can not let developer react to the attack if a XSS attack really happen. To answer the question that ``Through adding attack detection tools on server side, how much improvement on the efficiency can a system get when it is attacked?'', his project focuses on building a server side detection tool using pattern matching technique based on regular expression, the tool will notify the developer for possible XSS attacks and in this case make developer react earlier when XSS happened real time. We use three attack script to attack a server and use our detection tool on server side to test the effectiveness of the tool. The final result show both advantage and disadvantage of this detection technique.
Cross-site scripting (XSS) attack is a computer vulnerability that allow attacker to insert their own script to the web page to modify the web page in a way they want. By using XSS attack, attacker can modify the web page, stealing information from user, etc. These days, developer usually fix known XS vulnerabilities before been attack, or clean up the suspicious input using firewall before it been sent to the server. Both approaches cannot let developer react to the attack if a XSS attack really happen. To answer the question that ``Through adding attack detection tools on server side, how much improvement on the efficiency can a system get when it is attacked?'', his project focuses on building a server side detection tool using pattern matching technique based on regular expression, the tool will notify the developer for possible XSS attacks and in this case make developer react earlier when XSS happened real time. We use three attack script to attack a server and use our detection tool on server side to test the effectiveness of the tool. The final result show both advantage and disadvantage of this detection technique.
\end{abstract}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment