ENFORCING WEB APPLICATION AGAINST HTML BRUTE FORCE ATTACK | ||
| Diyala Journal For Pure Science | ||
| Article 1, Volume 10, Issue 1, February 2014, Pages 23-38 | ||
| Author | ||
| Samer Saeed Essa | ||
| Abstract | ||
| Securing web applications is today's most common aspect of securing the enterprise. Web application hacking is on the rise with as many as 80% of cyber attacks done at web application level or via the web. Most corporations have secured their data at the network level, but have overlooked the crucial step of checking whether their web applications are vulnerable to attack. This paper is devoted for presenting a model to protect web pages that acquire passwords and user names against HTML brute force. Along this paper the model will be presented as same as the methodologies of implementation. Algorithms of implementation also will be presented to emphasize the idea where all HTTP packets are trapped and relayed down the stack of the TCP/IP by inserting before HTTP (Port 80) and all HTTP traffic of information that is captured to check for the parameter passing in web and this proposed technique is called Enforcing layer. | ||
| Keywords | ||
| Web applications; Web Authentication; Web Attacking; brute force attack; HTTP; http | ||
|
Statistics Article View: 39 PDF Download: 5 |
||