xss

White Papers

Client-Side Detection of XSS Worms by Monitoring Payload Propagation

September 12, 2009 12:00am PDT

Cross-Site Scripting (XSS) vulnerabilities make it possible for worms to spread quickly to a broad range of users on popular Web sites. To date, the detection of XSS worms has been largely...

Provided by: Springer Science+Business Media

Webcasts

The Perils of Cross-Site Scripting (XSS)

January 1, 2009 12:00am PST

Cross-site Scripting (XSS) attacks are universally seen as the #1 security vulnerability facing web applications. Don't wait another today to learn how protect the organization. The presenter of...

Provided by: Breach Security

White Papers

An Empirical Analysis of XSS Sanitization in Web Application Frameworks

February 9, 2011 12:00am PST

Filtering or sanitization is the predominant mechanism in today's applications to defend against cross-site scripting (XSS) attacks. XSS sanitization can be difficult to get right as it ties in...

Provided by: University of California

White Papers

xJS: Practical XSS Prevention for Web Application Development

May 12, 2010 12:00am PDT

The authors present xJS, a practical framework for preventing code-injections in the web environment and thus assisting for the development of XSS-free web applications. xJS aims on being fast,...

Provided by: Microsoft Research

Webcasts

Detecting XSS Scripting (Cross-Site Scripting)

January 1, 2011 12:00am PST

This webcast should be viewed following the Script Injection video demonstration. Cross-site scripting ('XSS' or 'CSS') is an attack that takes advantage of a Web site vulnerability in which the...

Provided by: Imperva

White Papers

XSSDS: Server-side Detection of Cross-site Scripting Attacks

September 25, 2008 12:00am PDT

Cross-site Scripting (XSS) has emerged as one of the most prevalent type of security vulnerabilities. While the reason for the vulnerability primarily lies on the server-side, the actual...

Provided by: University of Hamburg

Webcasts

MSDN Webcast: Managing Cross-Site Scripting Using CAT.NET and AntiXSS (Level 200)

January 9, 2009 12:00am PST

Cross-site scripting attacks are one of the most common attack vectors that plague Web applications. This webcast provide an overview of the tools designed for discovery and mitigation of...

Provided by: Microsoft

White Papers

What Is Cross Site Scripting (XSS)?

September 13, 2008 12:00am PDT

High availability is a system design protocol and associated implementation that ensures a certain absolute degree of operational continuity during a given measurement period. Cross site scripting...

Provided by: SecPoint

White Papers

Automatic Generation of XSS and SQL Injection Attacks With Goal-Directed Model Checking

May 13, 2008 12:00am PDT

Cross-site scripting (XSS) and SQL injection errors are two prominent examples of taint-based vulnerabilities that have been responsible for a large number of security breaches in recent years....

Provided by: Stanford University

White Papers

XSS Injection

January 1, 2008 12:00am PST

The main idea and theory behind XSS Injection is getting a malicious script one crafted, to run on a victim's computer via a specially crafted attack due to a vulnerability in the way a server...

Provided by: V.A.P.T.

Downloads

Protect your Web site from cross-site scripting attacks

June 6, 2005 12:00am PDT

Cross-site scripting (XSS) attacks, a method by which attackers embed HTML scripts either in Web postings (stored XSS) or input fields on a Web site (reflected XSS), are gaining popularity, most...

Provided by: TechRepublic

White Papers

Hunting Cross-Site Scripting Attacks in the Network

May 3, 2010 12:00am PDT

CROSS-Site Scripting (XSS) attacks in web applications are considered a major threat. In a yearly basis, large IT security vendors export statistics that highlight the need for designing and...

Provided by: Foundation for Research and Technology - FORTH

Q&A

How to fix SQLinject me & XSS result but developers

April 28, 2010 12:31am PDT

How to fix SQLinject me & XSS result but developers Hi, I was used (XSS-Me and SQL inject me firefox addon) that tool, its really great and Result (SQL injection and XSS) also very clear. One...

1 Latest comment by ethikumar@...

White Papers

Consideration Points: Detecting Cross-Site Scripting

August 29, 2009 12:00am PDT

Web Application (WA) expands its usages to provide more and more services and it has become one of the most essential communication channels between service providers and the users. To augment the...

Provided by: Hanyang University

White Papers

Code-Injection Attacks in Browsers Supporting Policies

April 28, 2009 12:00am PDT

Code-injection attacks can take place in a large variety of layers, from native code to databases and web applications. The latter case involves mainly client-side code injection in the browser...

Provided by: Foundation for Research and Technology - FORTH

White Papers

Automatic Creation of SQL Injection and Cross-Site Scripting Attacks

September 6, 2008 12:00am PDT

The authors present a technique for finding security vulnerabilities in Web applications. SQL Injection (SQLI) and cross-site scripting (XSS) attacks are widespread forms of attack in which the...

Provided by: Stanford University

White Papers

Static Detection of Cross-Site Scripting Vulnerabilities

May 18, 2008 12:00am PDT

Web applications support many of the daily activities, but they often have security problems, and their accessibility makes them easy to exploit. In cross-site scripting (XSS), an attacker...

Provided by: Association for Computing Machinery

Blog Posts

What is cross-site scripting?

March 18, 2008 12:47pm PDT

Cross-site scripting, also known as "XSS", is a class of security exploit that has gotten a fair bit of attention in the last few years. Many users, and even Web developers, aren't entirely clear...

17 Latest comment by stacey7165

Articles

Italian develops first multi-site Web-mail worm

July 13, 2007 11:51am PDT

An Italian security researcher this week has developed the first Web-based e-mail worm capable of taking advantage of cross site scripting (XSS) vulnerabilities in multiple Web-mail services.

Articles

3 Questions: XSS Peril can come online or in paper form

February 24, 2004 8:00am PST

Cut down the risk of cross-site scripting threats by recognizing these XSS vulnerabilities.