摘要：In recent years publicly reported vulnerability have strong growth in web applications. These security vulnerabilities continue to infect the web applications can cause vast security problems. Organizations are taking their businesses online, attacker can steal confidential data of the organization with these attacks resulting loss of market value of the organization. Securing the websites against these vulnerabilities is very difficult and challenging task as day to day new techniques for attacks are invented, so the study of various types of vulnerabilities, detecting the attacks and providing solution for these vulnerabilities is essential part in internet world. This paper focuses on clickjacking attack and providing security mechanism as whitelisting URL analyzer to overcome the clickjacking attack. The security mechanism has the features and standards to measure the attack and how much the vulnerability is being exposed with respect to the context of application in the social networking environment. The Proposed iframe tag checking algorithm and DNSlookup checking algorithm is based on regex. Regex handles both the internal and external fault efficiently and reduces the load time of iframe tag checking and DNSlookup using simple patterns of regex. Thus the proposed algorithm overcomes clickjacking attack efficiently than existing defenses. The vulnerability of the attack can be measured by the deviation of the system state with expected state. This deviation can be overcome by the security mechanism. Key words — Clickjacking, security mechanism, iframe, DNSlookup, URL analyzer
