A Client-Based and Server-Enhanced Defense Mechanism for Cross-Site Request Forgery

2010 ◽  
pp. 484-485 ◽  
Author(s):  
Luyi Xing ◽  
Yuqing Zhang ◽  
Shenlong Chen
Keyword(s):  
Defense Mechanism ◽  
Cross Site Request Forgery ◽  
Cross Site

Cross-Site Request Forgery: Vulnerabilities and Defenses

2014 ◽  
Vol 3 (2) ◽  
pp. 13-21 ◽  
Author(s):  
Bharti Nagpal ◽  
Naresh Chauhan ◽  
Nanhay Singh
Keyword(s):  
Cross Site Request Forgery ◽  
Cross Site

Preventing Cross Site Request Forgery Attacks

2006 ◽  
Author(s):  
Nenad Jovanovic ◽  
Engin Kirda ◽  
Christopher Kruegel
Keyword(s):  
Cross Site Request Forgery ◽  
Cross Site

scholarly journals CSRFDtool: Automated Detection and Prevention of a Reflected Cross-Site Request Forgery

2014 ◽  
Vol 6 (5) ◽  
pp. 10-15 ◽  
Author(s):  
Omar A. Batarfi ◽  
◽  
Aisha M. Alshiky ◽  
Alaa A. Almarzuki ◽  
Nora A. Farraj
Keyword(s):  
Automated Detection ◽  
Cross Site Request Forgery ◽  
Cross Site

scholarly journals Penetration Testing Untuk Deteksi Vulnerability Sistem Informasi Kampus

2019 ◽  
Vol 1 ◽  
pp. 994
Author(s):  
Sahren Sahren ◽  
Ruri Ashari Dalimuthe ◽  
Muhammad Amin
Keyword(s):  
Information Systems ◽  
Information Service ◽  
Web Server ◽  
Dos Attacks ◽  
Penetration Testing ◽  
The Future ◽  
Medium Risk ◽  
Cross Site Request Forgery ◽  
Cross Site ◽  
The Web

Security is an effort that can be done to protect the information contained in it which refers to confidentiality. Information systems that are centrally prone to various types of attacks such as DoS, SQL Injections, Cross Site Scripting (XSS), Clickjacking, CSRF / Cross-site request forgery and so on. This will be a polemic for the information service owner and manager. The method to be carried out in this study is to do penetration testing to audit the security of the campus information system webserver. This activity aims to identify and exploit vulnerabilities in the web server. In this study, several tools will be used as a tool, including WHOIS, NMAP and Acunetix Web Vulnerability Scanner. Tests carried out are to look for vulnerabilities on the web server while the level of vulnerability that will be detected in this test sawill be inter alia higt risk, Medium risk and low risk. The aim is to find out the weaknesses in the web server so that in the future it can avoid DoS attacks, CSRF / Cross-site request forgery, Cross Site Scripting (XSS) and clickjacking. The results of this test are expected to be an input for the management of campus information systems for the future can be made improvements to existing weaknesses.

Sign in / Sign up

Export Citation Format

Share Document