Exploring the Attack Surface of WebSocket

04/12/2021
by   Saeid Ghasemshirazi, et al.
0

Over the years, with the advancement of technology, Web technology has many improvements. In the early days, the web was one-way communication, and only the customer was able to see the content of the site and could not enter information. However, day by day, the web made significant progress, and technologies such as HTTP, ajax, WebSocket introduced that make pages dynamic and Give us both sides. In short, it is a new type of communications protocol, which was faster and more efficient than previous communication protocols. After the web socket's unveiling, like any other technology, Its security has been discussed, and technology's security has always been a challenge for us. Therefore, in this article, we examine the structure and security problems that can occur in a web socket to choose an excellent alternative to HTTP and use it.

READ FULL TEXT

page 3

page 4

research
12/01/2017

Demystifying Mobile Web Browsing under Multiple Protocols

With the popularity of mobile devices, such as smartphones, tablets, use...
research
11/05/2021

Security Header Fields in HTTP Clients

HTTP headers are commonly used to establish web communications, and some...
research
01/15/2021

Bulwark: Holistic and Verified Security Monitoring of Web Protocols

Modern web applications often rely on third-party services to provide th...
research
11/03/2015

SWISH: SWI-Prolog for Sharing

Recently, we see a new type of interfaces for programmers based on web t...
research
10/29/2002

Encoding a Taxonomy of Web Attacks with Different-Length Vectors

Web attacks, i.e. attacks exclusively using the HTTP protocol, are rapid...
research
06/18/2019

A Performance Perspective on Web Optimized Protocol Stacks: TCP+TLS+HTTP/2 vs. QUIC

Existing performance comparisons of QUIC and TCP compared an optimized Q...
research
03/14/2018

How to Implement Dependencies in Server Pages of JEE Web Applications

Java Enterprise Edition (JEE) applications are implemented in terms of a...

Please sign up or login with your details

Forgot password? Click here to reset