Web attacks: defeating monetisation attempts. Issue 5 (May 2019)

• Record Type: Journal Article
• Authors: Nguyen, Van-Linh; Lin, Po-Ching; Hwang, Ren-Hung
• Is Part Of: Network security. Volume 2019:Issue 5(2019)
• Page Start: 11
• Page End: 19
• Publication Date: 2019-05
• Subjects: Computer security -- Periodicals; Computer networks -- Security measures -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; Computers -- Access control -- Periodicals; 005.805
• DOI: 10.1016/S1353-4858(19)30061-3
• Languages: English
• ISSNs: 1353-4858

Abstract

Abstract : According to Internet Live Stat, the total number of online websites has already soared over 1.9 billion and is steadily increasing. 1 The most popular content management systems (CMS) installed on such websites are PHP-based frameworks such as Wordpress and Joomla, which account for (as of December 2018) 59% and 6% of market share. 2, 3 A large number of those websites belong to small companies and individuals that may have few motivations to pay thousands of dollars for security maintenance services. Also, due to development costs, the owners – even the developers they hire – may prefer an off-the-shelf CMS such as Joomla to accelerate deployment. A large proportion of the nearly two billion websites now on the Internet are run by individuals and organisations without the skills or resources to make them secure. These sites are targets for cyber criminals looking to exploit weaknesses to 'monetise' them. Van-Linh Nguyen, Po-Ching Lin and Ren-Hung Hwang of the National Chung Cheng University, Taiwan, examine the tactics employed by criminals and present a framework for preventing such attacks, while acknowledging that this is a battle that is likely to continue.