While the 21st century has seen the explosion of the Internet bubble and the arrival of Web 2.0, ... more While the 21st century has seen the explosion of the Internet bubble and the arrival of Web 2.0, the standards have changed very little to support the growing number of new programs. Nevertheless developers have managed to continue delivering interactivity with the users and have continued to provide interesting Web-based applications for online services. Most web applications include JavaScript language that executes on the end-user's browser, unlike other languages such as Java, ASP and PHP that run on the server-side. Running a web application on a client’s browser allows it to acquire and obtain different HTTP parameters that may put it within a sizable diversity of web security vulnerabilities, such as SQL injection and Cross-site scripting (XSS). XSS vulnerabilities are undoubtedly the most common vulnerabilities found in Web applications. Although cross-site scripting has been assessed as mild-severity vulnerability from time to time, the development of XSS attacks has revived its portrait. This paper will discuss XSS vulnerabilities; most importantly, it will study three common known forms of XSS and approaches to preventing XSS attacks. Keywords: cross-site scripting, XSS, persistent, content security policy, DOM
The purpose of the first part of this paper will focus on the implementation and maintenance phas... more The purpose of the first part of this paper will focus on the implementation and maintenance phase of system development, roles, responsibilities and activities during this phase such as coding, testing, installation, documentation, training, and support. It will explain how these tasks are involved in placing a system into production and maintaining it. The second part of the paper describes security issues found during system implementation, Harris (2010) listed some in her book chapter 11 some of the security concerns that an organization faces during implementation such as network intrusion by unauthorized machines from outside networks, system vulnerabilities, exploits, backdoor, malware, direct data access, database SQL injections and distributed denial of service (DDOS). Lastly, this paper explores possible technologies that can promote information assurance during system implementation within an organization's network such as Virtual Private Network (VPN), firewalls, anti-viruses, intrusion prevention technologies, and penetration testing and authentication methodologies, code analyzers, and security policies.
The Topic of this paper is going to be about interplanetary telecommunications and networking. In... more The Topic of this paper is going to be about interplanetary telecommunications and networking. In the past decade, there have been many research studies conducted by National Aeronautics and Space Administration (NASA) scientists and other academic laboratories. Their focus has been on how to better communicate with spacecrafts, orbiters, and rovers on other planets. Initially, sending messages through space was done through radio waves. Each spacecraft, orbiter or rover had a receiver and transmitter that would interpret the information received and act on it.
Today's world continues to become more and more connected which has innately increased vulnerabil... more Today's world continues to become more and more connected which has innately increased vulnerability to breaches within organization information systems that cost corporations effort, time, and money. Companies depend on business applications like Enterprise Resource Planning (ERP)s that store and process all critical data for companies. Any information an attacker might want is stored in these systems and should be protected against unauthorized access. Security audit process and security assessment are considered good ways to protect these systems.
Wireless network or Wi-Fi network is in high demand by travelers making hotspots the new briefcas... more Wireless network or Wi-Fi network is in high demand by travelers making hotspots the new briefcase, while traveling with a laptop, a smartphone or tablet, hotspots provide the ability to reconnect to the world, prepare for a conference, chat with friends, access email, or simply for enjoyment. They provide handy access to anything one might need in train stations, airports, hotel…etc.
While the 21st century has seen the explosion of the Internet bubble and the arrival of Web 2.0, ... more While the 21st century has seen the explosion of the Internet bubble and the arrival of Web 2.0, the standards have changed very little to support the growing number of new programs. Nevertheless developers have managed to continue delivering interactivity with the users and have continued to provide interesting Web-based applications for online services. Most web applications include JavaScript language that executes on the end-user's browser, unlike other languages such as Java, ASP and PHP that run on the server-side. Running a web application on a client’s browser allows it to acquire and obtain different HTTP parameters that may put it within a sizable diversity of web security vulnerabilities, such as SQL injection and Cross-site scripting (XSS). XSS vulnerabilities are undoubtedly the most common vulnerabilities found in Web applications. Although cross-site scripting has been assessed as mild-severity vulnerability from time to time, the development of XSS attacks has revived its portrait. This paper will discuss XSS vulnerabilities; most importantly, it will study three common known forms of XSS and approaches to preventing XSS attacks. Keywords: cross-site scripting, XSS, persistent, content security policy, DOM
The purpose of the first part of this paper will focus on the implementation and maintenance phas... more The purpose of the first part of this paper will focus on the implementation and maintenance phase of system development, roles, responsibilities and activities during this phase such as coding, testing, installation, documentation, training, and support. It will explain how these tasks are involved in placing a system into production and maintaining it. The second part of the paper describes security issues found during system implementation, Harris (2010) listed some in her book chapter 11 some of the security concerns that an organization faces during implementation such as network intrusion by unauthorized machines from outside networks, system vulnerabilities, exploits, backdoor, malware, direct data access, database SQL injections and distributed denial of service (DDOS). Lastly, this paper explores possible technologies that can promote information assurance during system implementation within an organization's network such as Virtual Private Network (VPN), firewalls, anti-viruses, intrusion prevention technologies, and penetration testing and authentication methodologies, code analyzers, and security policies.
The Topic of this paper is going to be about interplanetary telecommunications and networking. In... more The Topic of this paper is going to be about interplanetary telecommunications and networking. In the past decade, there have been many research studies conducted by National Aeronautics and Space Administration (NASA) scientists and other academic laboratories. Their focus has been on how to better communicate with spacecrafts, orbiters, and rovers on other planets. Initially, sending messages through space was done through radio waves. Each spacecraft, orbiter or rover had a receiver and transmitter that would interpret the information received and act on it.
Today's world continues to become more and more connected which has innately increased vulnerabil... more Today's world continues to become more and more connected which has innately increased vulnerability to breaches within organization information systems that cost corporations effort, time, and money. Companies depend on business applications like Enterprise Resource Planning (ERP)s that store and process all critical data for companies. Any information an attacker might want is stored in these systems and should be protected against unauthorized access. Security audit process and security assessment are considered good ways to protect these systems.
Wireless network or Wi-Fi network is in high demand by travelers making hotspots the new briefcas... more Wireless network or Wi-Fi network is in high demand by travelers making hotspots the new briefcase, while traveling with a laptop, a smartphone or tablet, hotspots provide the ability to reconnect to the world, prepare for a conference, chat with friends, access email, or simply for enjoyment. They provide handy access to anything one might need in train stations, airports, hotel…etc.
Uploads
Papers by Rabie Khabouze
Keywords: cross-site scripting, XSS, persistent, content security policy, DOM
Keywords: cross-site scripting, XSS, persistent, content security policy, DOM