Noxes: a client-side solution for mitigating cross-site scripting attacks

By Engin Kirda, Christopher Krügel, Giovanni Vigna, Nenad Jovanovic. ACM Symposium on Applied Computing, 2006

366 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Information Systems, Signal Processing

View Paper: https://www.semanticscholar.org/paper/858b1790dc95a4782d3dd7a8cf9ac7f43e481cb2

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

1. Adam Kiezun
2. Christopher Krügel
3. Giovanni Vigna
4. Philip J. Guo
5. Michael D. Ernst
6. Engin Kirda
7. Zhendong Su
8. Gary Wassermann

In Information Systems

1. Adam Kiezun
2. Zhendong Su
3. Michael D. Ernst
4. Philip J. Guo
5. Giovanni Vigna
6. Christopher Krügel
7. Gary Wassermann
8. Karthick Jayaraman

In Signal Processing

1. Christopher Krügel
2. Giovanni Vigna
3. Andrew J. Clark
4. Jonathan J. Davis
5. Adam Kiezun
6. Engin Kirda
7. Aditya P. Mathur
8. Nwokedi C. Idika

Citations in the corpus

• Automatic creation of SQL Injection and cross-site scripting attacks (2009, background): “Mitigation techniques for XSS vulnerabilities are related to dynamic monitoring for SQLI attacks and can prevent leakage of information [13].”
• Pixy: a static analysis tool for detecting Web application vulnerabilities (2006, background): “The only client-side tool known to the authors is Noxes [14], an application-level firewall offering protection in case of suspected cross-site scripting (XSS) attacks that attempt to steal a user's credentials.”
• Static detection of cross-site scripting vulnerabilities (2008, background): “Noxes regulates activity that occurs over the network, but it does not address local behavior of JavaScript code [15].”
• Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis (2007, background): “The result is tainted if one of the used operands is tainted.”
• Defeating script injection attacks with browser-enforced embedded policies (2007, methodology): “Noxes [12] is a purely client-side method that aims to defend against cross-site scripting by disallowing the browser from contacting “bad” URLs.”
• Data preprocessing for anomaly based network intrusion detection: A review (2011, background): “Noxes (Kirda et al., 2006) is a personal web firewall with the aim of protecting web clients from cross-site scripting attacks.”
• A Survey of Malware Detection Techniques (2007, methodology): “[23] propose a technique for preventing cross-site scripting (XSS) attacks that attempt to compromise a user’s personal information.”