Web Abuse Using Cross Site Scripting (XSS) Attacks

MOHD UMAR JOHN DAR; Dr Junaid Latief Shah; Gazi Imtiyaz Ahmad Khanday

Abstract

AbstractIn today’s modern world, most of the applications are using World Wide Web (www) for information processing and transaction management. The popularity of web has eased out global outreach and accessibility to different users around the globe. Although web traffic has scaled up, it has also increased the abuse of applications by malicious html-based attacks by users; one such attack being the cross-site scripting (XSS). This attack poses a serious threat to web applications and e-databases that may include sensitive user data. Although other web attacks like SQL Injection, CSRF, phishing and session hijacking are also common, XSS tops the list of preferred technique for hackers to capitalize web resources for malicious activities. In this paper, we draw an overview of XSS attacks and its different types. We also discuss certain code prevention techniques possible including robust defense mechanisms. The paper also explicates discussion over the related work that has been concluded by researchers for mitigation scenario and techniques possible for prevention.Keywords: XSS, SQL, WWW, CSRFCite this ArticleMohd Umar John, Junaid Latief Shah, Gazi Imtiyaz Ahmad. Web Abuse Using Cross Site Scripting (XSS) Attacks. Journal of Artificial Intelligence Research & Advances. 2019; 6(1): 69–75p.