Some security issues for web based frameworks

P. Roberts-Morpeth; Jeremy Ellman

Some security issues for web based frameworks

P. Roberts-Morpeth, Jeremy Ellman

Computer and Information Sciences Department

Research output: Contribution to conference › Paper › peer-review

5 Citations (Scopus)

Abstract

This report investigates whether a vulnerability found in one web framework may be used to find a vulnerability in a different web framework. To test this hypothesis, several open source applications were installed in a secure test environment together with security analysis tools. Each one of the applications were developed using a different software framework. The results show that a vulnerability identified in one framework can often be used to find similar vulnerabilities in other frameworks. Crosssite scripting security issues are the most likely to succeed when being applied to more than one framework.

Original language	English
Publication status	Published - 2010
Event	7th International Symposium on Communication Systems Networks and Digital Signal processing (CSNDSP) - Northumbria University, Newcastle upon Tyne Duration: 21 Jul 2010 → … http://www.csndsp.com/

Conference

Conference	7th International Symposium on Communication Systems Networks and Digital Signal processing (CSNDSP)
Period	21/07/10 → …
Internet address	http://www.csndsp.com/

Keywords

cross-site scripting
open source applications
secure test environment
security analysis tools
vulnerability identification

Cite this

@conference{afa7afa5447f4c2faebad1b4e6a2c694,

title = "Some security issues for web based frameworks",

abstract = "This report investigates whether a vulnerability found in one web framework may be used to find a vulnerability in a different web framework. To test this hypothesis, several open source applications were installed in a secure test environment together with security analysis tools. Each one of the applications were developed using a different software framework. The results show that a vulnerability identified in one framework can often be used to find similar vulnerabilities in other frameworks. Crosssite scripting security issues are the most likely to succeed when being applied to more than one framework.",

keywords = "cross-site scripting, open source applications, secure test environment, security analysis tools, vulnerability identification",

author = "P. Roberts-Morpeth and Jeremy Ellman",

year = "2010",

language = "English",

note = "7th International Symposium on Communication Systems Networks and Digital Signal processing (CSNDSP) ; Conference date: 21-07-2010",

url = "http://www.csndsp.com/",

}

TY - CONF

T1 - Some security issues for web based frameworks

AU - Roberts-Morpeth, P.

AU - Ellman, Jeremy

PY - 2010

Y1 - 2010

N2 - This report investigates whether a vulnerability found in one web framework may be used to find a vulnerability in a different web framework. To test this hypothesis, several open source applications were installed in a secure test environment together with security analysis tools. Each one of the applications were developed using a different software framework. The results show that a vulnerability identified in one framework can often be used to find similar vulnerabilities in other frameworks. Crosssite scripting security issues are the most likely to succeed when being applied to more than one framework.

AB - This report investigates whether a vulnerability found in one web framework may be used to find a vulnerability in a different web framework. To test this hypothesis, several open source applications were installed in a secure test environment together with security analysis tools. Each one of the applications were developed using a different software framework. The results show that a vulnerability identified in one framework can often be used to find similar vulnerabilities in other frameworks. Crosssite scripting security issues are the most likely to succeed when being applied to more than one framework.

KW - cross-site scripting

KW - open source applications

KW - secure test environment

KW - security analysis tools

KW - vulnerability identification

UR - http://ieeexplore.ieee.org/search/srchabstract.jsp?tp=&arnumber=5580329&openedRefinements%3D*%26filter%3DAND%28NOT%284283010803%29%29%26searchField%3DSearch+All%26queryText%3DSome+security+issues+for+web+based+frameworks

M3 - Paper

T2 - 7th International Symposium on Communication Systems Networks and Digital Signal processing (CSNDSP)

Y2 - 21 July 2010

ER -

Some security issues for web based frameworks

Abstract

Conference

Keywords

Other files and links

Fingerprint

Cite this