<?xml version="1.0" encoding="utf-8"?>
<export-example>
  <doc>
    <id>15696</id>
    <completedYear/>
    <publishedYear>2016</publishedYear>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst>48</pageFirst>
    <pageLast>71</pageLast>
    <pageNumber/>
    <edition/>
    <issue>2</issue>
    <volume>14</volume>
    <type>articler</type>
    <publisherName/>
    <publisherPlace/>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>0</belongsToBibliography>
    <completedDate>2016-04-21</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">Cleaning up Web 2.0's Security Mess - at Least Partly</title>
    <parentTitle language="eng">IEEE Security &amp; Privacy</parentTitle>
    <identifier type="url">http://online.qmags.com/SNP0316?pg=92&amp;mode=2#pg92&amp;mode2</identifier>
    <identifier type="issn">1540-7993</identifier>
    <enrichment key="BTU">an der BTU erstellt / created at BTU</enrichment>
    <author>
      <firstName>Benjamin</firstName>
      <lastName>Stritter</lastName>
    </author>
    <submitter>
      <firstName>Katrin</firstName>
      <lastName>Willhöft</lastName>
    </submitter>
    <author>
      <firstName>Felix</firstName>
      <lastName>Freiling</lastName>
    </author>
    <author>
      <firstName>Hartmut</firstName>
      <lastName>König</lastName>
    </author>
    <author>
      <firstName>René</firstName>
      <lastName>Rietz</lastName>
    </author>
    <author>
      <firstName>Steffen</firstName>
      <lastName>Ullrich</lastName>
    </author>
    <author>
      <firstName>Alexander von</firstName>
      <lastName>Gernler</lastName>
    </author>
    <author>
      <firstName>Felix</firstName>
      <lastName>Erlacher</lastName>
    </author>
    <collection role="institutes" number="1203">FG Rechnernetze und Kommunikationssysteme</collection>
  </doc>
  <doc>
    <id>18913</id>
    <completedYear/>
    <publishedYear>2016</publishedYear>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst>242</pageFirst>
    <pageLast>253</pageLast>
    <pageNumber/>
    <edition/>
    <issue/>
    <volume/>
    <type>conferenceobject</type>
    <publisherName>IEEE</publisherName>
    <publisherPlace>Piscataway, NJ</publisherPlace>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>0</belongsToBibliography>
    <completedDate>2017-03-01</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">Firewalls for the Web 2.0</title>
    <abstract language="eng">The widespread use of Web 2.0 technologies yields an increasing threat potential for users and related systems. Modern web applications and online services are nowadays based on Web 2.0 technologies, such as JavaScript and AJAX, and thus on the execution of active content in the browsers of the users. Firewalls are a common practice to securely connecting to the internet. In this paper, we propose a novel perimeter firewall architecture for web applications that addresses the entire process chain starting from the data transfer with HTTP via the analysis of manipulated web documents to the extraction and analysis of active contents. The basic idea is to allow only a restricted set of web applications to pass the firewall based on a model of their HTML and JavaScript structure. We evaluate the capability of the resulting models for identifying the underlying web applications and their ability to ward off additional malicious inputs.</abstract>
    <parentTitle language="eng">Proceedings of the 2016 IEEE International Conference on Software Quality, Reliability and Security (QRS), 1-3 Aug. 2016</parentTitle>
    <identifier type="isbn">978-1-5090-4127-5</identifier>
    <identifier type="isbn">978-1-5090-4128-2</identifier>
    <identifier type="doi">10.1109/QRS.2016.36</identifier>
    <identifier type="url">http://ieeexplore.ieee.org/document/7589804/</identifier>
    <enrichment key="BTU">an der BTU erstellt / created at BTU</enrichment>
    <author>
      <firstName>René</firstName>
      <lastName>Rietz</lastName>
    </author>
    <submitter>
      <firstName>Katrin</firstName>
      <lastName>Willhöft</lastName>
    </submitter>
    <author>
      <firstName>Hartmut</firstName>
      <lastName>König</lastName>
    </author>
    <author>
      <firstName>Steffen</firstName>
      <lastName>Ullrich</lastName>
    </author>
    <author>
      <firstName>Benjamin</firstName>
      <lastName>Stritter</lastName>
    </author>
    <collection role="institutes" number="1203">FG Rechnernetze und Kommunikationssysteme</collection>
  </doc>
</export-example>
