Skip to main content
SpringerLink
Log in

DPLOOP: Detection and Prevention of Loopholes in Web Application Security

  • Conference paper
  • First Online:
Advances in Computational Intelligence and Communication Technology

Part of the book series: Advances in Intelligent Systems and Computing ((AISC,volume 1086))

Abstract

Web application loopholes are related to different components. Defeat correctly sanitized users’ given input is one of the prominent features that accompany to run illegal snippets in such type of programs. Due to the absence of proper input sanitization, common loopholes occur in web applications, such as SQL, Cross-site Scripting (XSS), XML, CSRF, and LDAP. Thus, research work presented in this paper deliberates possible methods to detect and mitigate vulnerabilities in order to prevent organizational websites against SQL and XSS loopholes. We have analyzed a dataset of URLs. SQL, XSS, and XML have the highest rate of detection and the least percentage of CSRF.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 169.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 219.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. F.T. Pirvadlu, G. Sepidnam, Assessments Sqli and Xss vulnerability in several organizational websites of North Khorasan in Iran and offer solutions to fix these vulnerabilities, in 2017 3rd International Conference Web Research ICWR 2017 (2017), pp. 44–47

    Google Scholar 

  2. Y. Ruan, X. Yan, Research on key technology of web application security test platform, in EMSS (2018) pp. 218–223

    Google Scholar 

  3. A.M. Hasan, D.T. Meva, A.K. Roy, J. Doshi, Perusal of web application security approach, in ICCT 2017—International Conference on Intelligent Communication and Computational Techniques, vol. 2018 (2018), pp. 90–95

    Google Scholar 

  4. C. Borghello, Top 10-2017 Top 10. [Online]. Available: https://www.owasp.org/index.php/Top_10-2017_Top_10. Accessed: 25-Aug-2018

  5. P.R. Kadam, Stop Website Attack before It Attacks You—XSS And SQLi Detection, vol. 2, no. 1 (2017), pp. 331–336

    Google Scholar 

  6. D.M. Varun, N.K. Mydhili, S. Dhrumil, Major Web Application Threats for Data Privacy & Security–Detection, Analysis and Mitigation Strategies, vol. 3, no. 7 (2017), pp. 182–198

    Google Scholar 

  7. M. Arianit, R. Ermir, J. Genc, Testing techniques and analysis of SQL injection attacks, in 2017 2nd International Conference on Knowledge Engineering and Applications, vol. 91 (2017), pp. 399–404

    Google Scholar 

  8. A. Alzahrani, A. Alqazzaz, Y. Zhu, H. Fu, N. Almashfi, Web application security tools analysis, in Proceedings 3rd IEEE International Conference on Big Data Security. Cloud, BigDataSecurity 2017, 3rd IEEE International Conference on High Performance Smart Computing. HPSC 2017, 2nd IEEE International Conference on Intelligence Data and Security (2017), pp. 237–242

    Google Scholar 

  9. M.R.V. Bhor, H.K. Khanuja, Analysis of web application security mechanism and attack detection using vulnerability injection technique, in Proceedings of 2nd International Conference on Computer and Communications, Control and Automation, ICCUBEA 2016 (2017)

    Google Scholar 

  10. J. Thome, L.K. Shar, D. Bianculli, L. Briand, An integrated approach for effective injection vulnerability analysis of web applications through security slicing and hybrid constraint solving. IEEE Trans. Softw. Eng. 5589, 1–33 (2018)

    Google Scholar 

  11. M.M. Hassan et al., Broken authentication and session management vulnerability: a case study of web application. Int. J. Simul. Syst. Sci. Technol. 19(2), 1–11 (2018)

    MathSciNet  Google Scholar 

  12. S. Jan, C.D. Nguyen, A. Arcuri, L. Briand, A search-based testing approach for XML injection vulnerabilities in web applications, in Proceedings of 10th IEEE International Conference on Software Testing, Verification and Validation, ICST 2017 (2017), pp. 356–366

    Google Scholar 

  13. I. Ilyas, M. Tayyab, A. Basharat, Solution to web services security and threats, in 2018 International Conference on Computing, Mathematics and Engineering Technologies Inven. Innov. Integr. Socioecon. Dev. iCoMET 2018, vol. 2018 (2018), pp. 1–4

    Google Scholar 

  14. R.P. Adhyaru, Techniques for attacking web application security. Int. J. Inf. Sci. Tech. 6(1/2), 45–52 (2016)

    Google Scholar 

  15. T.A. Taha, M. Karabatak, A proposed approach for preventing cross-site scripting, in 6th International Symposium on Digital Forensic and Security ISDFS 2018—Proceeding, vol. 2018 (2018), pp. 1–4

    Google Scholar 

  16. M.R. Zalbina, T.W. Septian, D. Stiawan, M.Y. Idris, A. Heryanto, R. Budiarto, Payload recognition and detection of Cross Site Scripting attack, in 2017 2nd International Conference on Anti-Cyber Crimes, ICACC 2017 (2017), pp. 172–176

    Google Scholar 

  17. A.W. Marashdih, Z.F. Zaaba, Detection and removing cross site scripting vulnerability in PHP web application, in 2017 International Conference on Promising Electronic Technologies ICPET 2017 (2017), pp. 26–31

    Google Scholar 

  18. I. Dolnak, Content Security Policy (CSP) as countermeasure to Cross Site Scripting (XSS) attacks, in ICETA 2017—15th International Conference on Emerging eLearning Technologies and Applications (2017)

    Google Scholar 

  19. V. Dehalwar, A. Kalam, M.L. Kolhe, A. Zayegh, Review of web-based information security threats in smart grid, 2017 7th International Conference on Power Systems, ICPS 2017 (2018), pp. 849–853.

    Google Scholar 

  20. A. Sudhodanan, R. Carbone, L. Compagna, N. Dolgin, A. Armando, U. Morelli, Large-scale analysis & detection of authentication cross-site request forgeries, in Proceedings—2nd IEEE European Symposium on Security and Privacy (EuroS&P) 2017 (2017), pp. 350–365

    Google Scholar 

  21. “OpenPhish.” [Online]. Available: https://openphish.com/. Accessed: 07-Sept-2018

  22. A. Nair, P. Chame, S. Gaikwad, S. Ethape, P.S. Agarwal, Prevention of Cross Site Scripting (XSS) and securing web application atclient side. Int. J. Emerg. Technol. Comput. Sci. 3(2), 83–86 (2018)

    Google Scholar 

Download references

Author information

Authors and Affiliations

  1. CAS, Dr. APJ Abdul Kalam Technical University, Lucknow, India

    Monika & Vijay Tiwari

Authors
  1. Monika
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Vijay Tiwari
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Monika .

Editor information

Editors and Affiliations

  1. School of Computing, University of Eastern Finland, Kuopio, Finland

    Xiao-Zhi Gao

  2. Computer Science Engineering Department, ABES Engineering College, Delhi, India

    Shailesh Tiwari

  3. Department of Computer Science and Engineering, National Institute of Technology Agartala, Agartala, Tripura, India

    Munesh C. Trivedi

  4. Motilal Nehru National Institute of Technology, Allahabad, Uttar Pradesh, India

    Krishn K. Mishra

Rights and permissions

Reprints and permissions

Copyright information

© 2021 Springer Nature Singapore Pte Ltd.

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Monika, Tiwari, V. (2021). DPLOOP: Detection and Prevention of Loopholes in Web Application Security. In: Gao, XZ., Tiwari, S., Trivedi, M., Mishra, K. (eds) Advances in Computational Intelligence and Communication Technology. Advances in Intelligent Systems and Computing, vol 1086. Springer, Singapore. https://doi.org/10.1007/978-981-15-1275-9_14

Download citation

Publish with us

Policies and ethics

Search

Navigation