Recovering information from RIAs users access logs

点击翻译按钮获取中文摘要

Web applications, and in particular "Rich Internet Applications" (RIAs), which use advanced technologies such as JavaScript, AJAX, HTML5 etc., represent an increasingly large proportion of modern systems. Nowadays, most of the interactions we have with computers involve Web and Web applications. This tendency will increase moving forward as RIAs become increasingly mobile-friendly.****For all their advantages, Web applications and RIAs are also notoriously plagued with security vulnerabilities, a problem that needs to be resolved as soon as possible. Companies such as IBM have developed a series of products and services centered on making Web applications more secure, and are now shifting their focus toward RIAs. However, these tools and services are currently limited in their ability to handle RIAs efficiently.****In this research, we aim to contribute to RIAs security in two ways: first, we will mine existing usage (HTTP) logs of the application to infer a series of technical information about the application, and then use that information to automatically configure security scanners. This will allow the automatic detection of security vulnerabilities in RIAs. Second, still using HTTP logs but from a single user, we will automatically reconstruct that user session, a reconstruction that can be used by forensics investigators after a security incident has been reported; thus dramatically improving the accuracy of the investigation while significantly cutting down the time required to perform the investigation.**