XSS Attack Detection and Prevention System Based on Instruction Set Randomization

Qijin Wang, Jun Huang, Xiaoxia Qi · IOP Conference Series Materials Science and Engineering · 2019

Abstract As one of the most popular security vulnerabilities in Web applications, XSS has been widely researched and applied. This paper presents a XSS detection and prevention system aimed at solving the problem of website being attacked by increasingly sophisticated and severe XSS. The method proposed in this paper encodes the HTML/JavaScript keyword in the Web application by randomization and distinguishes the malicious attacks. The results show that this method not only can effectively detect and defend reflective and storage XSS attacks, but also it has better system response.

Read the paper · More papers on PaperTik