A COMPARATIVE STUDY OFSECURITY VULNERABILITIES INRESPONSIVE WEB DESIGN FRAMEWORKS
Pakorn Ieamsirinoppakun · DiVA (Mälardalen University College) · 2015
With a fast growing of Internet, users spent more time accessing websites through mobile devices.Traditional websites that are not designed to support multi screen sizes typically have a lowernumber of users accessing the website. Responsive Web Design (RWD) is a web design techniquethat solves this limitation of traditional websites. RWD can dynamically adapt and fluidly displaya webpage in different sizes and resolution. Many RWD frameworks are available in the market tofacilitate the responsive webpage layout. Currently, RWD frameworks are widely used and discussedon its features only, while security vulnerabilities are usually not considered.In this thesis, we aim to study the security vulnerabilities of RWD frameworks to identifythe most secure RWD framework. To contribute, we first select RWD frameworks that rely onJavaScript as JavaScript vulnerabilities are commonly used to attack a webpage. Then, we identifythe common security vulnerability in JavaScript that RWD frameworks could enable. Next, we testselected frameworks based on the identified vulnerability. The results are evaluated and comparedby using established security metrics and comparison criteria. Finally, we identify the most secureRWD framework from the considered RWD frameworks.