Vulnerability-driven filtering of network data can offer a fast and easy-to-deploy alternative or intermediary to software patching, as exemplified in Shield. This paper takes Shield's vision to a new domain, inspecting and cleansing not just static content, but also dynamic content. The dynamic content it targets is the dynamic HTML in web pages, which have become a popular vector for attacks. The key challenge in filtering dynamic HTML is that it is undecidable to statically determine whether an embedded script will exploit the browser at run-time. This paper avoids this undecidability problem by rewriting web pages and any embedded scripts into safe equivalents, inserting checks so that the filtering is done at run-time.
Did you find this white paper useful?
23 out of 50 users found this white paper useful
Related white papers
MSDN Webcast: Access the HTML DOM From Managed Code (Level 100)
The attendee of this webcast will learn how to call the HTML Document Object Model (DOM) in Microsoft Silverlight version 1.1 to control visual elements in an HTML page -...
Clustering Tags in Enterprise and Web Folksonomies
Off late there has been massive growth in the use of tags as a simple, flexible way to categorize resources. Tags are often used collaboratively to help share information using...
JSP/Servlet Architecture Performances
In this article we will discuss servlet configuration in which HTML production takes place in the servlet via Java APIs and JSP configuration in which HTML is generated by the...
Cut Your Work in Half With the New Split View
In Microsoft Office FrontPage 2003, the new Split view gives simultaneous complete control over both the design and the code of the Web pages.
Decipher Your Code With the Quick Tag Selector and Quick Tag Editor
Web pages can be fun, but not when one have to wade through a lot of code in order to find a problem or change an HTML tag, right? The...
Dull Web Site?: Brighten With Interactive Buttons
Want professional-looking buttons on Web site, without a lot of effort? Then bypass learning design and coding skills, and use FrontPage interactive buttons. With these dynamic buttons, users can impress...
Manage Your Site From Anywhere With Remote Web Site View
Remote Web site view, a new feature in Microsoft Office FrontPage 2003, allows doing all that and more. Users can easily find and publish changed pages, and can just as...
