A Semantic Data Validation Service for Web Applications

An Input validation can be a critical issue. Typically, a little attention is paid to it in a web development project, because overenthusiastic validation can tend to cause failures in the software, and can also break the security upon web applications such as an unauthorized access to data. Now, it is estimated the web application vulnerabilities (such as XSS or SQL injection) for more than two thirds of the reported web security vulnerabilities. In this paper, we start with a case study of the bypassing data validation and security vulnerabilities such as SQL injection and then go on to discuss the merits of a number of common data validation techniques. We also review the different solutions to date to provide data validation techniques in ecommerce applications. From this analysis, a new data validation service which is based upon semantic web Technologies, has been designed and implemented to prevent the web security vulnerabilities at the application level and to secure the web ...

• Type: Journal
• Year: 2010
• Where: JTAER
• Authors: Shadi Aljawarneh, Faisal Alkhateeb, Eslam Al Maghayreh
• Keywords: Data Validation, JTAER 2010, Security Vulnerabilities, Web Application