Verification of web content integrity : a new approach to protect servers against tampering
Shadi A Aljawarneh, Christopher Laing, Paul Vickers · Northumbria Research Link (Northumbria University) · 2007
The provision of web services is a real-time process, conducted in ad-hoc, ‘off the cuff’ manner. Consequently the verification of the data content and the identification of any authorized data interference or manipulation are not without problems. Some progress has been made in addressing the verification of server content integrity, but current solutions are restricted by the limitations of the SSL protocol, the statelessness of HTTP, and difficulties with automatic code analysis. This paper reviews the problems associated with unauthorized data manipulation of static and dynamic web content, presents a web security real-time framework that can be used to verify the static and dynamic web content of a requested page. It is suggested that such a framework will offer an increased level of user confidence, since the framework will provide a much greater protection against web server subversion.