Scenario-Based Cross-Site Request Forgery (CSRF) Attack Simulation
Taj Saleh, Malek Malkawi, Ziad Elgammal, Arzu Kilitci Calayır, Reda Alhajj · 2024
In the dynamic realm of technology, where new advancements consistently transform our online interactions, maintaining the security of web apps is crucial. This study explores the area of web security by investigating Cross-Site Request Forgery (CSRF) vulnerabilities in great detail. We untangle the complexities of CSRF attacks and highlight their possible risks and implications by using advanced simulations in a controlled environment. To carefully and correctly mimic CSRF attacks, the process entails creating a legitimate web application along with a malicious counterpart. The study carefully assesses the effectiveness of custom headers, SameSite cookie characteristics, and anti-CSRF tokens as defense strategies. In addition to its technological focus, the research emphasizes participant involvement’s ethical implications and stresses the significance of user safety. The results provide practical advice for developers and security experts to strengthen web apps in addition to furthering our theoretical understanding of CSRF issues. We show why there is a need for strong security measures to be put in place as soon as possible, acknowledge the ever-changing nature of cyber threats, and call for ongoing research to keep ahead of the curve in terms of protecting digital ecosystems. In conclusion, this study is an invaluable tool for understanding and resolving the urgent problems caused by CSRF vulnerabilities, demonstrating its importance in strengthening the security framework of our globalized digital society.