期刊名称：TELKOMNIKA (Telecommunication Computing Electronics and Control)
印刷版ISSN：2302-9293
出版年度：2019
卷号：17
期号：2
页码：852-856
DOI：10.12928/telkomnika.v17i2.10484
出版社：Universitas Ahmad Dahlan
摘要：In this digital era, organizations and industries are moving towards replacing websites with web
applications for many obvious reasons. With this transition towards web-based applications, organizations
and industries find themselves surrounded by several threats and vulnerabilities. One of the largest
concerns is keeping their infrastructure safe from attacks and misuse. Web security entails applying a set
of procedures and practices, by applying several security principles at various layers to protect web
servers, web users, and their surrounding environment. In this paper, we will discuss several attacks that
may affect web-based applications namely: SQL injection attacks, cookie poisoning, cross-site scripting,
and buffer overflow. Additionally, we will discuss detection and prevention methods from such attacks.
其他摘要：In this digital era, organizations and industries are moving towards replacing websites with web applications for many obvious reasons. With this transition towards web-based applications, organizations and industries find themselves surrounded by several threats and vulnerabilities. One of the largest concerns is keeping their infrastructure safe from attacks and misuse. Web security entails applying a set of procedures and practices, by applying several security principles at various layers to protect web servers, web users, and their surrounding environment. In this paper, we will discuss several attacks that may affect web-based applications namely: SQL injection attacks, cookie poisoning, cross-site scripting, and buffer overflow. Additionally, we will discuss detection and prevention methods from such attacks.
