Exploring Guidance for Prevent Against XSS Attacks in Open CMSs
| المصدر: | مجلة كلية فلسطين التقنية للأبحاث والدراسات |
|---|---|
| الناشر: | كلية فلسطين التقنية - دير البلح |
| المؤلف الرئيسي: | Hijazi, Manal I. M. (Author) |
| مؤلفين آخرين: | Barhoom, Tawfiq S. M. (Co-Author) |
| المجلد/العدد: | ع2 |
| محكمة: | نعم |
| الدولة: |
فلسطين |
| التاريخ الميلادي: |
2015
|
| الشهر: | يوليو |
| الصفحات: | 1 - 19 |
| DOI: |
10.47641/JRS.2015-2-1.08 |
| ISSN: |
2518-5721 |
| رقم MD: | 1109520 |
| نوع المحتوى: | بحوث ومقالات |
| اللغة: | الإنجليزية |
| قواعد المعلومات: | EduSearch, EcoLink, HumanIndex |
| مواضيع: | |
| كلمات المؤلف المفتاحية: |
Cross Site Scripting | Malicious Code | Content Management System | Joomla | Wordpress | Security Guidance
|
| رابط المحتوى: |
عدد مرات التحميل
2
| المستخلص: |
Personal information, as well as web pages security are important for everyone because attackers used to steel our sensitive information or damaged that websites. Cross Site Scripting XSS is one type of the methods that is used by attackers. Since web browser supports the execution of scripting commands embedded in the retrieved content, attacker can exploit this feature maliciously to violate the client security. Content Management Systems CMSs give web developer an easy way to have personal websites, for those people without security prior experience, and who would be under great hunting of attackers. They believe that Content Management System just a plug-in, but it is really a website. In this paper, we concentrate on crossing site scripting attacks problem, as one of the most common attacks in the recent World Wide Web. In this research, experiments are limited to Joomla and WordPress websites. At the end, we extracted some security guidance and rules in general for all Content Management Systems designers. Some of these rules are beneficial; especially for Joomla and WordPress developers. In this work, we trained a group of amateurs to develop their websites using Joomla and WordPress through our extracted security guidance. We believe that this work was not done before. |
|---|---|
| ISSN: |
2518-5721 |
عناصر مشابهة
-
Exploring guidance for prevent against XSS attacks in open CMS
بواسطة: Hijazi, Manal Ibrahim منشور: (2015) -
An approach for detecting and preventing DoS attack in LAN
بواسطة: Tabash, Majed I. M. منشور: (2015) -
Wormhole attack detection and prevention model in MANET based on Hop-Count and localization
بواسطة: Awad, Badran M. منشور: (2015) -
Implementation and Comparison of OTP Techniques (TOTP,HOTP,CROTP) to Prevent Replay Attack in RADIUS Protocol
بواسطة: Abukeshipa, Amna S. M. منشور: (2014) -
A New Defense Mechanism against Smishing Attacks Using Gray Wolf Optimizer
بواسطة: السامرائي، مروان حامد شاكر منشور: (2020)
