On last.fm: Who's your favorite band?
BNET Business Network:
BNET
TechRepublic
ZDNet

FREE Registration is required

Overview:

This paper presents a static control-flow analysis for JavaScript programs running in a web browser. The analysis tackles numerous challenges posed by modern web applications including asynchronous communication, frameworks, and dynamic code generation. The paper uses the analysis to extract a model of expected client behavior as seen from the server, and build an intrusion-prevention proxy for the server: the proxy intercepts client requests and disables those that do not meet the expected behavior. The paper inserts random asynchronous requests to foil mimicry attacks. Finally, the paper evaluates the technique against several real applications and show that it protects against an attack in a widely-used web application.

(Is this item miscategorized? Does it need more tags? Let us know.)

Format:PDFSize:413 KB
Date:Apr 2009
Pages:10

Top results from Programming Languages

White Paper Designing High Availability for Internet Information Services
White Paper Surviving and Thriving in the Customer-Driven Age
White Paper Citizants: Bringing IT In-House
White Paper Supporting Employees Anytime, Anywhere
White Paper The Pursuit of a Standardized Solution for Secure Enterprise RBAC

» View all Programming Languages listings

Top results from Network Security

White Paper The Essential Guide: Real-Time High Availability for Exchange - Replicate Exchange Data for Improved Resiliency
Webcast Live Webcast: Web Attacks: How Hackers Create and Spread Malware
White Paper Practical Approaches for Securing Web Applications across the Software Delivery Lifecycle
Webcast Webcast: Smart Techniques for application security: whitebox + blackbox testing.
White Paper Managing a growing threat: An Executive's Guide to Web Application Security

» View all Network Security listings

advertisement
Click Here

White Papers, Webcasts, and Resources

Featured Training Courses

advertisement

SmartPlanet

Click Here

Returning users: Log In Here!

Already registered on BNET, TechRepublic, or ZDNet? Simply log in.

Free Membership: Sign Up Now!

Sign up for a free membership today and get instant and unlimited access to one of the largest databases of white papers, webcasts, and casestudies anywhere. Your FREE membership allows you to:

  • Download an unlimited amount of content, including classic and current white papers, case studies, webcasts and more
  • Track content on your chosen topics of interest
  • Receive targeted email alerts when your favorite content is added
  • Save content for future reading
  • Receive our member newsletter

When you register to access this library, you allow us to share your information with companies that produce products or services featured in the library--so that such companies may contact you with information and offers regarding their products and services. This enables us to keep the library a free service. As a library registrant, you will receive a complimentary subscription to the ZDNet white paper newsletter and e-mail Must-Read News Alerts. You can unsubscribe from these at any time. By clicking the Sign up button, you indicate that you agree to our Terms and Conditions and have read and understand our Privacy Policy (updated).