Web Security and Mobile Code

• Web Security Requirements
• User Privacy: What are we Protecting?
• Data Traces
• Web Server Data
• Log File Contents
• Web Server Exploitation Attempts
• Packet Dump Output
• Password in a Packet Dump
• Malicious Applets
• The Java Sandbox Model
• Bytecode Verification
• Policy Example
• ActiveX and Code Signing
• Javascript
• Cookies
• User Authentication
• Application-layer Attacks
• Server Security and Scripting
• Scripting Exploitation Example
• Scripting Guidelines
• State Variable Manipulation
• Cross-site Scripting
• Bibliography
• Appendix A: Protecting the Internet Explorer
• Appendix B: Protecting Mozilla
• Appendix C: Protecting the Netscape Navigator

• PreviousAccess Control, Firewalls and VPNs
• Contents
• NextSoftware Security

 Last change: Wednesday, October 27, 2004 10:19 am
 Unless otherwise expressly stated, all original material on this page created by Diomidis Spinellis is licensed under a Creative Commons Attribution-Share Alike 3.0 Greece License.