Research Article

A survey of client-side Web threats and counter-threat measures

  1. Daniel Hein1,
  2. Serhiy Morozov2,
  3. Hossein Saiedian2,3,*

Article first published online: 13 JUL 2011

DOI: 10.1002/sec.349

Issue

Security and Communication Networks

Security and Communication Networks

Volume 5, Issue 5, pages 535–544, May 2012

Additional Information

How to Cite

Hein, D., Morozov, S. and Saiedian, H. (2012), A survey of client-side Web threats and counter-threat measures. Security Comm. Networks, 5: 535–544. doi: 10.1002/sec.349

Author Information

  1. 1

    Garmin International, Olathe, KS, U.S.A.

  2. 2

    EECS, University of Kansas, Lawrence, KS, U.S.A.

  3. 3

    ITTC, University of Kansas, Lawrence, KS, U.S.A.

*Hossein Saiedian, ITTC, University of Kansas, Lawrence, KS 66045, U.S.A.
E-mail: saiedian@eecs.ku.edu

Publication History

  1. Issue published online: 18 APR 2012
  2. Article first published online: 13 JUL 2011
  3. Manuscript Accepted: 19 APR 2011
  4. Manuscript Revised: 15 FEB 2011
  5. Manuscript Received: 21 SEP 2010

SEARCH

SEARCH BY CITATION

ARTICLE TOOLS

View Full Article (HTML) Get PDF (209K)

Keywords:

  • information security;
  • Web security;
  • browser attacks;
  • cross-site scripting;
  • client-side security;
  • trust and trustworthiness;
  • policy enforcement

ABSTRACT

The increasing frequency and malevolence of online security threats require that we consider new approaches to this problem. The existing literature focuses on the Web security problem from the server-side perspective. In contrast, we explore it from the client-side, considering the major types of threats. After a short threat summary, we discuss related research and existing countermeasures. We then examine intuitive human-oriented trust models and posit a flexible, multilayer framework to facilitate automated client-side decision making. The proposed suggestions are not intrusive and do not require advanced technical knowledge from end users. Copyright © 2011 John Wiley & Sons, Ltd.

View Full Article (HTML) Get PDF (209K)