Logo image
Back
Client-Side Detection of Clickjacking Attacks
Journal article   Peer reviewed

Client-Side Detection of Clickjacking Attacks

Hossain Shahriar and Hisham M. Haddad
International journal of information security and privacy, Vol.9(1)
01/2015
DOI: https://doi.org/10.4018/IJISP.2015010101
Web of Science ID: WOS:000383751500001

Metrics

1 Record Views

Abstract

clickjacking Control Applications (Computer Sciences) Cybersecurity Computer Science
Clickjacking attacks are emerging threat for web application users where click operations performed by victims lead to security breaches such as compromising webcams and posting unintended messages. Effective client-side defense technique could prevent the possible victims. This paper presents a client side approach to detect clickjacking attacks. The authors' approach examines web page requests and responses; the proposed approach is designed to detect advanced attack types such as cursorjacking, double click, and history object-based attacks. They evaluate the proposed approach with a set of legitimate and malicious websites. The results indicate that our approach has low false positive and false negative rates. The overhead imposed by the proposed approach is negligible.

Details

Logo image