TY - GEN A1 - Stritter, Benjamin A1 - Freiling, Felix A1 - König, Hartmut A1 - Rietz, René A1 - Ullrich, Steffen A1 - Gernler, Alexander von A1 - Erlacher, Felix T1 - Cleaning up Web 2.0's Security Mess - at Least Partly T2 - IEEE Security & Privacy Y1 - 2016 UR - http://online.qmags.com/SNP0316?pg=92&mode=2#pg92&mode2 SN - 1540-7993 VL - 14 IS - 2 SP - 48 EP - 71 ER - TY - CHAP A1 - Rietz, René A1 - König, Hartmut A1 - Ullrich, Steffen A1 - Stritter, Benjamin T1 - Firewalls for the Web 2.0 T2 - Proceedings of the 2016 IEEE International Conference on Software Quality, Reliability and Security (QRS), 1-3 Aug. 2016 N2 - The widespread use of Web 2.0 technologies yields an increasing threat potential for users and related systems. Modern web applications and online services are nowadays based on Web 2.0 technologies, such as JavaScript and AJAX, and thus on the execution of active content in the browsers of the users. Firewalls are a common practice to securely connecting to the internet. In this paper, we propose a novel perimeter firewall architecture for web applications that addresses the entire process chain starting from the data transfer with HTTP via the analysis of manipulated web documents to the extraction and analysis of active contents. The basic idea is to allow only a restricted set of web applications to pass the firewall based on a model of their HTML and JavaScript structure. We evaluate the capability of the resulting models for identifying the underlying web applications and their ability to ward off additional malicious inputs. Y1 - 2016 UR - http://ieeexplore.ieee.org/document/7589804/ SN - 978-1-5090-4127-5 SN - 978-1-5090-4128-2 U6 - https://doi.org/10.1109/QRS.2016.36 SP - 242 EP - 253 PB - IEEE CY - Piscataway, NJ ER -