Attack Mitigation in Multi-service Web Applications

Please enable javascript in your browser.

Shahrokhi, Hooman | 2022

154 Viewed

Type of Document: M.Sc. Thesis
Language: Farsi
Document No: 54902 (19)
University: Sharif University of Technology
Department: Computer Engineering
Advisor(s): Kharrazi, Mehdi
Abstract:
Defending software against different types of attacks is challenging enough, but for server-side programs it is even harder. The ever-changing nature of technologies used on server-side programs makes it more complex. In this thesis we try to identify these challenges in regard to two specific technologies: multi-service architectures and asynchronous I/O. Then, we present a new framework for running software in asynchronous multi-service architectures with native support for access control rules. Our framework acts as an intermediate between services and can support rules based on the distributed request context that exists between services.
Keywords:
Software Security ; Web-Application Software ; Asynchronous Input/Output ; Multi-Service Architectures ; Application Security ; Attack Mitigation

No TOC