Detection and Mitigation of Cross-site Scripting using NIDS

Computer Engineering(IT Systems & Network Security)

Web application is the application program that keeps on remote server, is accessed globally and delivered over the web through a browser interface. Web Application Security is always issue usually considered because of 60% of attacks are targeting the web application platform. Cross site Scripting may be a vulnerability that found in web application. Cross-site scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into trusted websites. Cross site Scripting happens once associate attacker uses an online application to send malicious code, typically within the type of browser aspect script, to a singular user. One of the most important attacks on technology is XSS attack that is on the third number in Top 10 list of Web Application Security Project (OWASP) in 2017.There are such a lot of ways to prevent this type of attacks. Network Intrusion Detection is one resolution to prevent Cross-site Scripting attacks. This will work for payload recognition and detection of cross-site scripting. To recognize and detect the XSS attack regular expression pattern matching and preprocessing method is used. Thus to improve the result of false positives arises and to prevent it at network level this technique is suggested here. The proposed system is the dual layer security with the use of content security policy as well as Network Intrusion Detection System. The successful implementation of the proposed system will detect and mitigate XSS more precisely.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.