Sensor-Based Mobile Web Cross-Site Input Inference Attacks and Defenses

Cross-site scripting vulnerabilities are among the top ten security vulnerabilities affecting web applications for the past decade and mobile version web applications more recently. They can cause serious problems for web users such as loss of personal information to web attackers, including financial and health information, denial of service attacks, and exposure to malware and viruses. Most of the proposed solutions focused only on the Desktop versions of web applications and overlooked the mobile versions. Increasing use of mobile phones to access web applications increases the threat of cross-site scripting attacks on mobile phones. This paper presents work in progress on detecting cross-site scripting vulnerabilities in mobile versions of web applications. It proposes an enhanced genetic algorithm-based approach that detects cross-site scripting vulnerabilities in mobile versions of web applications. This approach has been used in our previous work and successfully detected the said vulnerabilities in Desktop web applications. It has been enhanced and is currently being tested in mobile versions of web applications. Preliminary results have indicated success in the mobile versions of web applications also. This approach will enable web developers find cross-site scripting vulnerabilities in the mobile versions of their web applications before their release.

Download Full-text

Tracking Mobile Web Users Through Motion Sensors: Attacks and Defenses

Proceedings 2016 Network and Distributed System Security Symposium ◽

10.14722/ndss.2016.23390 ◽

2016 ◽

Cited By ~ 35

Author(s):

Anupam Das ◽

Nikita Borisov ◽

Matthew Caesar

Keyword(s):

Motion Sensors ◽

Mobile Web ◽

Attacks And Defenses

Download Full-text

An Analysis of Security and Performance Concerns in Mobile Web Application Development: Challenges and Open Issues

International Journal of Recent Contributions from Engineering Science & IT (iJES) ◽

10.3991/ijes.v5i3.7330 ◽

2017 ◽

Vol 5 (3) ◽

pp. 26

Author(s):

Douglas Kunda ◽

Mumbi Chishimba ◽

Mwenge Mulenga ◽

Victoria Chama

Keyword(s):

Web Application ◽

Web Applications ◽

Application Development ◽

Mobile Web ◽

Web Application Development ◽

And Performance ◽

Session Hijacking ◽

Application Developers ◽

Cross Site ◽

Open Issues

The paper focuses on security and performance concerns in mobile web development. The approach used in the study involved surveying journal publications to identify security and performance concerns. The paper highlights some of the contemporary issues currently being faced by application developers as they create, update and maintain mobile web applications including Cross-Site Scripting, Cookie hijacking/theft, location hijacking, history theft, behaviour analysis, session hijacking, API design, security and the type of web server used considered.

Download Full-text