Divide and conquer: the threats posed by hybrid apps and HTML 5

Mansfield-Devine, Steve

doi:10.1016/s1353-4858(10)70033-7

Cited by 6 publications

(2 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Instead of selecting an edge randomly, we give priorities to the outgoing edges which lead to an uncovered node. For example, as in Figure 5, currently, we have traversed the following path [0, 1, 2, 3, 1], and we have two edges for selection, [1,2] and [1,4]. Because node 4 has not been covered in the current traversal, we give priority to [1,4] to accelerate the process to include all nodes in the graph.…”

Section: Inputmentioning

confidence: 99%

“…Compared with HTML4, HTML5 defines more specific input attributes such as telephone number, color, and email address. However, on the other hand, some studies have also presented the security issues affiliated with HTML5 [1][2][3][4][5], especially the injection attacks on the websites [6][7][8][9]. Even though in HTML5 regular users can only enter a valid value through the user interfaces supported by browsers, malicious users can skip the user interface and directly send malformed HTTP requests to the web server.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Automatic Test Pattern Generator for Fuzzing Based on Finite State Machine

Wang

Chen

et al. 2017

Security and Communication Networks

View full text Add to dashboard Cite

With the rapid development of the Internet, several emerging technologies are adopted to construct fancy, interactive, and userfriendly websites. Among these technologies, HTML5 is a popular one and is widely used in establishing modern sites. However, the security issues in the new web technologies are also raised and are worthy of investigation. For vulnerability investigation, many previous studies used fuzzing and focused on generation-based approaches to produce test cases for fuzzing; however, these methods require a significant amount of knowledge and mental efforts to develop test patterns for generating test cases. To decrease the entry barrier of conducting fuzzing, in this study, we propose a test pattern generation algorithm based on the concept of finite state machines. We apply graph analysis techniques to extract paths from finite state machines and use these paths to construct test patterns automatically. According to the proposal, fuzzing can be completed through inputting a regular expression corresponding to the test target. To evaluate the performance of our proposal, we conduct an experiment in identifying vulnerabilities of the input attributes in HTML5. According to the results, our approach is not only efficient but also effective for identifying weak validators in HTML5.

show abstract

Section: Inputmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Automatic Test Pattern Generator for Fuzzing Based on Finite State Machine

Wang

Chen

et al. 2017

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

Current Trends in Vector-Based Internet Mapping: A Technical Review

Lienert¹,

Jenny

Schnabel³

et al. 2012

Lecture Notes in Geoinformation and Cartography

View full text Add to dashboard Cite

HTML5: A New Standard for the Web

Hoy

2011

Medical Reference Services Quarterly

View full text Add to dashboard Cite

HTML5 is the newest revision of the HTML standard developed by the World Wide Web Consortium (W3C). This new standard adds several exciting news features and capabilities to HTML. This article will briefly discuss the history of HTML standards, explore what changes are in the new HTML5 standard, and what implications it has for information professionals. A list of HTML5 resources and examples will also be provided.

show abstract

Divide and conquer: the threats posed by hybrid apps and HTML 5

Cited by 6 publications

References 0 publications

Automatic Test Pattern Generator for Fuzzing Based on Finite State Machine

Automatic Test Pattern Generator for Fuzzing Based on Finite State Machine

Current Trends in Vector-Based Internet Mapping: A Technical Review

HTML5: A New Standard for the Web

Contact Info

Product

Resources

About