White Papers

Protecting the Intranet Against "JavaScript Malware" and Related Attacks

Overview The networking functionality of JavaScript is restricted by the Same Origin Policy (SOP). However, as the SOP applies on a document level, JavaScript still possesses certain functionality for cross domain communication. These capabilities can be employed by malicious JavaScript to gain access to intranet resources from the outside. This paper exemplifies capabilities of such scripts. To protect intranet hosts against JavaScript based threats, the paper then proposes three countermeasures: Element Level SOP, rerouting of cross-site requests, and restricting the local network. These approaches are discussed concerning their respective protection potential and disadvantages. Based on this analysis, the most promising approach, restricting the local network, is evaluated practically.

Download White Paper

By downloading you agree to our Terms and Conditions. These include information regarding use of your personal data.

Publisher
Springer Science+Business Media
File Format
PDF
Date Published
Oct 22, 2008
Format
White Papers
Topics
Spyware, Intranet, Network Security

Springer Science+Business Media White Papers

Open-Source PC-Based Software Routers: A Viable Approach to High-Performance Packet Switching

Open-Source PC-Based Software Routers: A Viable Approach to High-Performance Packet Switching

This paper considers IP routers based on off-the-shelf Personal Computer (PC) hardware running the Linux open-source ope

Publisher: Springer Science+Business Media  |  Tags: ip, linux, pc, pcs, routers, software

Multi-path Routing Protocols in Wireless Mobile Ad Hoc Networks: A Quantitative Comparison

Multi-path Routing Protocols in Wireless Mobile Ad Hoc Networks: A Quantitative Comparison

Multi-path routing represents a promising routing method for wireless mobile ad hoc networks. Multi-path routing achieve

Publisher: Springer Science+Business Media

TCP Over CDMA2000 Networks: A Cross-Layer Measurement Study

TCP Over CDMA2000 Networks: A Cross-Layer Measurement Study

Modern cellular channels in 3G networks incorporate sophisticated power control and dynamic rate adaptation which can ha

Publisher: Springer Science+Business Media  |  Tags: cdma, cdma2000, cellular, ip

Architectural Decisions and Patterns for Transactional Workflows in SOA

Architectural Decisions and Patterns for Transactional Workflows in SOA

An important architectural style for constructing enterprise applications is to use transactional workflows in SOA. In t

Publisher: Springer Science+Business Media  |  Tags: applications, enterprise applications, soa

Channel Capacity of TDD-OFDM-MIMO for Multiple Access Points in a Wireless Single-Frequency-Network

Channel Capacity of TDD-OFDM-MIMO for Multiple Access Points in a Wireless Single-Frequency-Network

The Multiple-Input-Multiple-Output (MIMO) technique is the most attractive candidate to improve the spectrum efficiency

Publisher: Springer Science+Business Media  |  Tags: data