Cross-Site Attack Defenses
Cross-Site Attack Defenses
XSS and XSRF are common forms of viruses and malware which readily spread across the internet and propagate themselves in many programs. To that end, being proactive in identifying and thwarting them before they enter a given system can be essential on the front end for the network’s protection. Primary defenses against these attacks can include embedding code in HTML templates and requiring server validation for any received data packets (Williams, Manico ; Mattatall, 2018, para. 2). While this approach is initially solid in terms of assessing incoming information, which fits the given protocols, there is still an opportunity for viruses to sneak through undetected through minor glitches in the coding. As such, further options must be considered.
One method which has been helpful has been the implementation of blocking SQL inquiries which could trigger cyberattacks (Mewara, Bairwa ; Gajrani, 2014, para. 2). While both this tactic and the HTML coding are fairly easy to implement, the more effective (but also more challenging option) is to establish filters on each of the more popular browsers, including Internet Explorer and Chrome as examples, and this method seems to be the more intensive of the processes as well as the most effective (Shar ; Tan, 2012, para. 2). Tests have shown that it has been relatively effective in placing a shield against incoming intruders and ongoing cyber assaults from external sources, although it is a bit more time consuming and detailed than its predecessors may be. In many cases, these are most always used extensively for that reason, since the time constraints are not always feasible for client usage, nor are space or usage
statistics. Hence, despite a positive baseline for these items, they are still in the infancy stages of popularity in terms of being used widely in the field.
References
Mewara, B., Bairwa, S., ; Gajrani, J. (2014). Browser’s defenses against reflected cross-site scripting attacks. 2014 International Conference on Signal Propagation and Computer Technology (ICSPCT 2014). doi: 10.1109/icspct.2014.6884928
Shar, L., & Tan, H. (2012). Defending against Cross-Site Scripting Attacks. Computer, 45(3), 55-62. doi: 10.1109/mc.2011.261
Williams, J., Manico, J., & Mattatall, N. (2018). XSS (Cross Site Scripting) Prevention Cheat Sheet -OWASP https://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet
