Primer on Client-Side Web Security

1. Front Matter

   Pages i-x

   PDF

2. The Relevance of Client-Side Web Security

   • Philippe De Ryck, Lieven Desmet, Frank Piessens, Martin Johns

   Pages 1-9

3. Traditional Building Blocks of the Web

   • Philippe De Ryck, Lieven Desmet, Frank Piessens, Martin Johns

   Pages 11-24

4. The Browser as a Platform

   • Philippe De Ryck, Lieven Desmet, Frank Piessens, Martin Johns

   Pages 25-32

5. How Attackers Threaten the Web

   • Philippe De Ryck, Lieven Desmet, Frank Piessens, Martin Johns

   Pages 33-42

6. Attacks on the Network

   • Philippe De Ryck, Lieven Desmet, Frank Piessens, Martin Johns

   Pages 43-55

7. Attacks on the Browser’s Requests

   • Philippe De Ryck, Lieven Desmet, Frank Piessens, Martin Johns

   Pages 57-68

8. Attacks on the User’s Session

   • Philippe De Ryck, Lieven Desmet, Frank Piessens, Martin Johns

   Pages 69-82

9. Attacks on the Client-Side Context

   • Philippe De Ryck, Lieven Desmet, Frank Piessens, Martin Johns

   Pages 83-94

10. Attacks on the Client Device

    • Philippe De Ryck, Lieven Desmet, Frank Piessens, Martin Johns

    Pages 95-103

11. Improving Client-Side Web Security

    • Philippe De Ryck, Lieven Desmet, Frank Piessens, Martin Johns

    Pages 105-111

This volume illustrates the continuous arms race between attackers and defenders of the Web ecosystem by discussing a wide variety of attacks. In the first part of the book, the foundation of the Web ecosystem is briefly recapped and discussed. Based on this model, the assets of the Web ecosystem are identified, and the set of capabilities an attacker may have are enumerated. In the second part, an overview of the web security vulnerability landscape is constructed. Included are selections of the most representative attack techniques reported in great detail. In addition to descriptions of the most common mitigation techniques, this primer also surveys the research and standardization activities related to each of the attack techniques, and gives insights into the prevalence of those very attacks. Moreover, the book provides practitioners a set of best practices to gradually improve the security of their web-enabled services. Primer on Client-Side Web Security expresses insights into the future of web application security. It points out the challenges of securing the Web platform, opportunities for future research, and trends toward improving Web security.

• Best Practices for Web Security
• Mitigation Techniques
• Security Model of the Web
• Web 2.0 Security
• Web Application Security
• Web Vulnerabilities

• iMinds-DistriNet, KU Leuven, Heverlee, Belgium

  Philippe De Ryck, Lieven Desmet, Frank Piessens

• SAP Research, Karlsruhe, Germany

  Martin Johns

Policies and ethics