Mode Switching for Secure Web Applications - A Juice Shop Case Scenario

Michael Riegler; Johannes Sametinger

doi:10.1007/978-3-030-87101-7_1

Mode Switching for Secure Web Applications - A Juice Shop Case Scenario

Michael Riegler
, Johannes Sametinger

Publikation: Beitrag in Buch/Bericht/Konferenzband › Konferenzbeitrag › Begutachtung

Abstract

Switching modes is a general mechanism that is used in many domains. We have suggested to use it for security purposes to make systems more resilient when vulnerabilities are known or when attacks are performed. OWASP provides several vulnerable web applications for testing and training security skills. We have the idea of applying mode switching to one of these applications in order to demonstrate its usefulness in increasing security. We have chosen Juice Shop as our sample application. In this paper (i) we suggest a multi-modal architecture for web applications; (ii) we present Juice Shop as our web application scenario; and (iii) we show first reflections on how mode switching can reduce attack surfaces and, thus, increase resilience.

Originalsprache	Englisch
Titel	32nd DEXA Workshops, September 27 - 30, 2021, Vienna, Austria, virtual.
Herausgeber*innen	Gabriele Kotsis, A Min Tjoa, Ismail Khalil, Bernhard Moser, Atif Mashkoor, Johannes Sametinger, Anna Fensel, Jorge Martinez-Gil, Lukas Fischer, Gerald Czech, Florian Sobieczky, Sohail Khan
Verlag	Springer, Cham
Seiten	3-8
Seitenumfang	6
Band	1479
ISBN (Print)	978-3-030-87100-0
DOIs	https://doi.org/10.1007/978-3-030-87101-7_1
Publikationsstatus	Veröffentlicht - 2021

Publikationsreihe

Name	Communications in Computer and Information Science
Band	1479 CCIS
ISSN (Print)	1865-0929
ISSN (elektronisch)	1865-0937

Wissenschaftszweige

202017 Embedded Systems
102002 Augmented Reality
102006 Computer Supported Cooperative Work (CSCW)
102015 Informationssysteme
102020 Medizinische Informatik
102022 Softwareentwicklung
102034 Cyber-Physical Systems
201132 Computational Engineering
201305 Verkehrstechnik
207409 Navigationssysteme
502032 Qualitätsmanagement
502050 Wirtschaftsinformatik
503015 Fachdidaktik Technische Wissenschaften

JKU-Schwerpunkte

Digital Transformation

Zugriff auf Dokument

10.1007/978-3-030-87101-7_1

Andere Dateien und Links

Verknüpfung zur Publikation in Scopus

Software Security
Sametinger, J. (Projektleiter*in)
01.01.2009 → 31.12.2026
Projekt: Anderes › Projekt aus Wissenschaftsgebiet der Forschungseinheit

Dieses zitieren

Riegler, M., & Sametinger, J. (2021). Mode Switching for Secure Web Applications - A Juice Shop Case Scenario. in G. Kotsis, A. M. Tjoa, I. Khalil, B. Moser, A. Mashkoor, J. Sametinger, A. Fensel, J. Martinez-Gil, L. Fischer, G. Czech, F. Sobieczky, & S. Khan (Hrsg.), 32nd DEXA Workshops, September 27 - 30, 2021, Vienna, Austria, virtual. (Band 1479, S. 3-8). (Communications in Computer and Information Science; Band 1479 CCIS). Springer, Cham. https://doi.org/10.1007/978-3-030-87101-7_1

Riegler, Michael ; Sametinger, Johannes. / Mode Switching for Secure Web Applications - A Juice Shop Case Scenario. 32nd DEXA Workshops, September 27 - 30, 2021, Vienna, Austria, virtual.. Hrsg. / Gabriele Kotsis ; A Min Tjoa ; Ismail Khalil ; Bernhard Moser ; Atif Mashkoor ; Johannes Sametinger ; Anna Fensel ; Jorge Martinez-Gil ; Lukas Fischer ; Gerald Czech ; Florian Sobieczky ; Sohail Khan. Band 1479 Springer, Cham, 2021. S. 3-8 (Communications in Computer and Information Science).

@inproceedings{144f1fbd7e8b46ac98b3cc4212cf0d6c,

title = "Mode Switching for Secure Web Applications - A Juice Shop Case Scenario",

abstract = "Switching modes is a general mechanism that is used in many domains. We have suggested to use it for security purposes to make systems more resilient when vulnerabilities are known or when attacks are performed. OWASP provides several vulnerable web applications for testing and training security skills. We have the idea of applying mode switching to one of these applications in order to demonstrate its usefulness in increasing security. We have chosen Juice Shop as our sample application. In this paper (i) we suggest a multi-modal architecture for web applications; (ii) we present Juice Shop as our web application scenario; and (iii) we show first reflections on how mode switching can reduce attack surfaces and, thus, increase resilience.",

author = "Michael Riegler and Johannes Sametinger",

year = "2021",

doi = "10.1007/978-3-030-87101-7\_1",

language = "English",

isbn = "978-3-030-87100-0",

volume = "1479",

series = "Communications in Computer and Information Science",

publisher = "Springer, Cham",

pages = "3--8",

editor = "Gabriele Kotsis and Tjoa, \{A Min\} and Ismail Khalil and Bernhard Moser and Atif Mashkoor and Johannes Sametinger and Anna Fensel and Jorge Martinez-Gil and Lukas Fischer and Gerald Czech and Florian Sobieczky and Sohail Khan",

booktitle = "32nd DEXA Workshops, September 27 - 30, 2021, Vienna, Austria, virtual.",

}

Riegler, M & Sametinger, J 2021, Mode Switching for Secure Web Applications - A Juice Shop Case Scenario. in G Kotsis, AM Tjoa, I Khalil, B Moser, A Mashkoor, J Sametinger, A Fensel, J Martinez-Gil, L Fischer, G Czech, F Sobieczky & S Khan (Hrsg.), 32nd DEXA Workshops, September 27 - 30, 2021, Vienna, Austria, virtual.. Bd. 1479, Communications in Computer and Information Science, Bd. 1479 CCIS, Springer, Cham, S. 3-8. https://doi.org/10.1007/978-3-030-87101-7_1

Mode Switching for Secure Web Applications - A Juice Shop Case Scenario. / Riegler, Michael; Sametinger, Johannes.
32nd DEXA Workshops, September 27 - 30, 2021, Vienna, Austria, virtual.. Hrsg. / Gabriele Kotsis; A Min Tjoa; Ismail Khalil; Bernhard Moser; Atif Mashkoor; Johannes Sametinger; Anna Fensel; Jorge Martinez-Gil; Lukas Fischer; Gerald Czech; Florian Sobieczky; Sohail Khan. Band 1479 Springer, Cham, 2021. S. 3-8 (Communications in Computer and Information Science; Band 1479 CCIS).

Publikation: Beitrag in Buch/Bericht/Konferenzband › Konferenzbeitrag › Begutachtung

TY - GEN

T1 - Mode Switching for Secure Web Applications - A Juice Shop Case Scenario

AU - Riegler, Michael

AU - Sametinger, Johannes

PY - 2021

Y1 - 2021

N2 - Switching modes is a general mechanism that is used in many domains. We have suggested to use it for security purposes to make systems more resilient when vulnerabilities are known or when attacks are performed. OWASP provides several vulnerable web applications for testing and training security skills. We have the idea of applying mode switching to one of these applications in order to demonstrate its usefulness in increasing security. We have chosen Juice Shop as our sample application. In this paper (i) we suggest a multi-modal architecture for web applications; (ii) we present Juice Shop as our web application scenario; and (iii) we show first reflections on how mode switching can reduce attack surfaces and, thus, increase resilience.

AB - Switching modes is a general mechanism that is used in many domains. We have suggested to use it for security purposes to make systems more resilient when vulnerabilities are known or when attacks are performed. OWASP provides several vulnerable web applications for testing and training security skills. We have the idea of applying mode switching to one of these applications in order to demonstrate its usefulness in increasing security. We have chosen Juice Shop as our sample application. In this paper (i) we suggest a multi-modal architecture for web applications; (ii) we present Juice Shop as our web application scenario; and (iii) we show first reflections on how mode switching can reduce attack surfaces and, thus, increase resilience.

UR - https://www.scopus.com/pages/publications/85115855396

U2 - 10.1007/978-3-030-87101-7_1

DO - 10.1007/978-3-030-87101-7_1

M3 - Conference proceedings

SN - 978-3-030-87100-0

VL - 1479

T3 - Communications in Computer and Information Science

SP - 3

EP - 8

BT - 32nd DEXA Workshops, September 27 - 30, 2021, Vienna, Austria, virtual.

A2 - Kotsis, Gabriele

A2 - Tjoa, A Min

A2 - Khalil, Ismail

A2 - Moser, Bernhard

A2 - Mashkoor, Atif

A2 - Sametinger, Johannes

A2 - Fensel, Anna

A2 - Martinez-Gil, Jorge

A2 - Fischer, Lukas

A2 - Czech, Gerald

A2 - Sobieczky, Florian

A2 - Khan, Sohail

PB - Springer, Cham

ER -

Riegler M, Sametinger J. Mode Switching for Secure Web Applications - A Juice Shop Case Scenario. in Kotsis G, Tjoa AM, Khalil I, Moser B, Mashkoor A, Sametinger J, Fensel A, Martinez-Gil J, Fischer L, Czech G, Sobieczky F, Khan S, Hrsg., 32nd DEXA Workshops, September 27 - 30, 2021, Vienna, Austria, virtual.. Band 1479. Springer, Cham. 2021. S. 3-8. (Communications in Computer and Information Science). doi: 10.1007/978-3-030-87101-7_1

Mode Switching for Secure Web Applications - A Juice Shop Case Scenario

Abstract

Publikationsreihe

Wissenschaftszweige

JKU-Schwerpunkte

Zugriff auf Dokument

Andere Dateien und Links

Projekte

Software Security

Dieses zitieren