Securing heterogeneous embedded devices against XSS attack in intelligent IoT system

ASIA unversity > 資訊學院 > 資訊工程學系 > 期刊論文 > Item 310904400/115590

請使用永久網址來引用或連結此文件: http://asiair.asia.edu.tw/ir/handle/310904400/115590

題名:	Securing heterogeneous embedded devices against XSS attack in intelligent IoT system
作者:	Chaudh, Pooja;Chaudharya, Pooja;Bhoosha, Brij;Gupta, Brij Bhooshan;Singha, A.K.;Singha, A.K.
貢獻者:	資訊電機學院資訊工程學系
關鍵詞:	Intelligent IoT System；Embedded device security；Firmware security；Device management web interface vulnerabilities；Cross-site scripting (XSS) attack；Web application vulnerability
日期:	2022-03-01
上傳時間:	2023-03-29 02:50:18 (UTC+0)
出版者:	亞洲大學
摘要:	Today, we are living in the realm of Internet of Things (IoT) where simple objects are embedded with the capabilities to understand and operate in its surroundings for offering distinct services to the users. These objects are shipped with their user interfaces that facilitate user to perform administrative activities on the devices using a web browser linked to the device's server. Cross-Site Scripting (XSS) is the most prevalent web application's vulnerability, exploited by an attacker to compromise the embedded devices. This research work is focused towards the development of an approach to defend against XSS attack to safeguard embedded devices deployed in intelligent IoT system. It performs identification through comparing injected strings with the blacklisted attack vectors and mitigates its harmful effects by implementing filtering method in an optimized fashion. It is a fog-enabled approach that operates locally to identify the compromised device within the IoT network. We demonstrate attack exploitation on two smart devices including digital IP Camera and wireless router and then tested the performance of our proposed approach on them. The experimental results highlight the efficacy of the approach as it attains an accuracy of 0.9 and above, on both the tested platforms.
顯示於類別:	[資訊工程學系] 期刊論文

文件中的檔案:

檔案	描述	大小	格式	瀏覽次數
index.html		0Kb	HTML	268	檢視/開啟

在ASIAIR中所有的資料項目都受到原著作權保護.

資料載入中.....