Security for Web Applications Using Wiretap Library

Abstract

We propose a method that provides information-theoretic security for client-server communications. An appropriate encoding scheme based on wiretap codes is used to show how a client -server architecture under active attacks can be modeled as a binary-erasure wiretap channel. The secrecy capacity of the equivalent wiretap channel is used as a metric to optimize the architecture and limit the impact of the attacks. We also provide a method to design attack-resistant client-server architectures that are resilient and secure using wiretap codes. Specifically, the objective is not only to ensure reliable communication between client and servers in the presence of disrupted nodes, but also to guarantee that a malicious attacker hacking the packet information at compromised nodes is unable to retrieve the content of the message being exchanged. In principle, standard encryption techniques could be implemented to ensure secure communication between client and servers; however, instead of using traditional cryptographic tools to encrypt information contained in the packet, the proposed approach exploits the fact that the attacker only gets parts of the packets sent by the client. we define wiretap model as a java web application security framework in order to solve web application vulnerabilities. Wiretap model extends web application’s behavior by adding security functionalities maintaining the API and the framework specification. The security functionalities include Integrity, Editable data validation, Confidentiality, Anti-CSRF token.