Taint Inference for Cross-Site Scripting in Context of URL Rewriting and HTML Sanitization
Taint Inference for Cross-Site Scripting in Context of URL Rewriting and HTML Sanitization
复制标题
URL 重写和 HTML 清理上下文中跨站点脚本的污点推断
DOI：
10.4218/etrij.16.0115.0570
复制
发表时间：
2016
期刊：
影响因子：
1.4
通讯作者：
Li Weishi
中科院分区：
文献类型：
--
作者：
Pan Jinkun;Mao Xiaoguang;Li Weishi
当前，Web应用程序正在流行。在Web应用程序中，可能无法对输入进行适当的验证，这使Web应用程序易受跨站点脚本（XSS）的影响，该应用程序对Internet用户和网站构成了严重的安全问题。污点推理是一种信息流分析技术，可用于检测客户端的XSS。但是，在现有技术中，目前的两个实际问题尚未正确处理。一个是翻新URL，它将标准URL转换为更清晰，更易于管理的形式。另一个是HTML消毒，它过滤了针对HTML标签或属性的黑名单或白名单的输入。在本文中，我们在生物信息学中的污点推理问题和分子序列对齐问题之间做出了类比，并将与后者相关的两种技术转移到了前者，以解决上述尚未实用的实用问题。特别是，在我们的方法中，使用局部序列比对来解决URL的重写，而HTML消毒是通过引入删除间隙惩罚来建模的。经验结果证明了我们方法的有效性和效率。
Currently, web applications are gaining in prevalence. In a web application, an input may not be appropriately validated, making the web application susceptible to crosssite scripting (XSS), which poses serious security problems for Internet users and websites to whom such trusted web pages belong. A taint inference is a type of information flow analysis technique that is useful in detecting XSS on the client side. However, in existing techniques, two current practical issues have yet to be handled properly. One is URL rewriting, which transforms a standard URL into a clearer and more manageable form. Another is HTML sanitization, which filters an input against blacklists or whitelists of HTML tags or attributes. In this paper, we make an analogy between the taint inference problem and the molecule sequence alignment problem in bioinformatics, and transfer two techniques related to the latter over to the former to solve the aforementioned yetto- be-handled-properly practical issues. In particular, in our method, URL rewriting is addressed using local sequence alignment and HTML sanitization is modeled by introducing a removal gap penalty. Empirical results demonstrate the effectiveness and efficiency of our method.