{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T05:26:35Z","timestamp":1787030795076,"version":"build-2736575974"},"reference-count":33,"publisher":"IGI Global Scientific Publishing","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,10]]},"abstract":"<jats:p>Cross-site scripting is one of the notable exceptions effecting almost every web application. Hence, this article proposed a framework to negate the impact of the XSS attack on web servers deployed in one of the major applications of the Internet of Things (IoT) i.e. the smart city environment. The proposed framework implements 2 approaches: first, it executes vulnerable flow tracking for filtering injected malicious scripting code in dynamic web pages. Second, it accomplished trusted remark generation and validation for unveiling any suspicious activity in static web pages. Finally, the filtered and modified webpage is interfaced to the user. The prototype of the framework has been evaluated on a suite of real-world web applications to detect XSS attack mitigation capability. The performance analysis of the framework has revealed that this framework recognizes the XSS worms with very low false positives, false negatives and acceptable performance overhead as compared to existent XSS defensive methodologies.<\/jats:p>","DOI":"10.4018\/joeuc.2020100105","type":"journal-article","created":{"date-parts":[[2020,10,23]],"date-time":"2020-10-23T10:34:05Z","timestamp":1603449245000},"page":"85-111","source":"Crossref","is-referenced-by-count":21,"title":["Designing a XSS Defensive Framework for Web Servers Deployed in the Existing Smart City Infrastructure"],"prefix":"10.4018","volume":"32","author":[{"given":"Brij B.","family":"Gupta","sequence":"first","affiliation":[{"name":"National Institute of Technology, Kurukshetra, India & Asia University, Taiwan & Macquarie University, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0766-0530","authenticated-orcid":true,"given":"Pooja","family":"Chaudhary","sequence":"additional","affiliation":[{"name":"National Institute of Technology, Kurukshetra, India"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2124-9388","authenticated-orcid":true,"given":"Shashank","family":"Gupta","sequence":"additional","affiliation":[{"name":"Birla Institute of Technology and Science, Pilani, India"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"2432","reference":[{"key":"JOEUC.2020100105-0","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420952"},{"issue":"1","key":"JOEUC.2020100105-1","doi-asserted-by":"crossref","first-page":"3960","DOI":"10.17485\/ijst\/2013\/v6i1.18","article-title":"Phishing dynamic evolving neural fuzzy framework for online detection zero-day phishing email.","volume":"6","author":"A.Almomani","year":"2013","journal-title":"Indian Journal of Science and Technology"},{"key":"JOEUC.2020100105-2","doi-asserted-by":"publisher","DOI":"10.1145\/1772690.1772701"},{"key":"JOEUC.2020100105-3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_2"},{"key":"JOEUC.2020100105-4","doi-asserted-by":"publisher","DOI":"10.1145\/1968587.1968603"},{"key":"JOEUC.2020100105-5","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-5577-5_9"},{"key":"JOEUC.2020100105-6","doi-asserted-by":"publisher","DOI":"10.4018\/IJITWE.2019010105"},{"key":"JOEUC.2020100105-7","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-0105-3.ch010"},{"key":"JOEUC.2020100105-8","doi-asserted-by":"publisher","DOI":"10.4018\/joeuc.2006010101"},{"key":"JOEUC.2020100105-9","doi-asserted-by":"publisher","DOI":"10.1109\/UCC.2014.137"},{"key":"JOEUC.2020100105-10","doi-asserted-by":"publisher","DOI":"10.4018\/IJCAC.2017010101"},{"key":"JOEUC.2020100105-11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46298-1_7"},{"key":"JOEUC.2020100105-12","doi-asserted-by":"publisher","DOI":"10.1016\/j.protcy.2016.05.152"},{"key":"JOEUC.2020100105-13","doi-asserted-by":"publisher","DOI":"10.4018\/IJWSR.2017100101"},{"key":"JOEUC.2020100105-14","doi-asserted-by":"publisher","DOI":"10.1504\/IJICS.2018.091455"},{"key":"JOEUC.2020100105-15","doi-asserted-by":"publisher","DOI":"10.1504\/IJICA.2018.090822"},{"key":"JOEUC.2020100105-16","first-page":"1","article-title":"Evaluation and monitoring of XSS defensive solutions: A survey, open research issues and future directions.","author":"S.Gupta","year":"2018","journal-title":"Journal of Ambient Intelligence and Humanized Computing"},{"key":"JOEUC.2020100105-17","doi-asserted-by":"publisher","DOI":"10.1504\/IJICA.2018.092588"},{"key":"JOEUC.2020100105-18","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-8536-9_43"},{"key":"JOEUC.2020100105-19","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.05.038"},{"key":"JOEUC.2020100105-20","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.03.029"},{"key":"JOEUC.2020100105-21"},{"key":"JOEUC.2020100105-22","unstructured":"HtmlUnit parser. (n.d.). Retrieved from https:\/\/sourceforge.net\/projects\/htmlunit\/files\/htmlunit\/"},{"key":"JOEUC.2020100105-23","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2018.02.060"},{"key":"JOEUC.2020100105-24","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-017-4452-0"},{"key":"JOEUC.2020100105-25","doi-asserted-by":"publisher","DOI":"10.1145\/2480359.2429115"},{"key":"JOEUC.2020100105-26","doi-asserted-by":"publisher","DOI":"10.4018\/JOEUC.2018070101"},{"key":"JOEUC.2020100105-27","doi-asserted-by":"publisher","DOI":"10.1145\/2414456.2414458"},{"key":"JOEUC.2020100105-28","unstructured":"Rhino JavaScript parser. (n.d.). Retrieved from https:\/\/developer.mozilla.org\/en-US\/docs\/Mozilla\/Projects\/Rhino\/Download_Rhino"},{"key":"JOEUC.2020100105-29","unstructured":"XSS RSnake. (2008). Cheat Sheet. Retrieved from https:\/\/n0p.net\/penguicon\/php_app_sec\/mirror\/xss.html"},{"key":"JOEUC.2020100105-30","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046776"},{"key":"JOEUC.2020100105-31","doi-asserted-by":"publisher","DOI":"10.1109\/CSNT.2013.113"},{"key":"JOEUC.2020100105-32"}],"container-title":["Journal of Organizational and End User Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.igi-global.com\/viewtitle.aspx?TitleId=265235","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,6]],"date-time":"2022-05-06T05:48:12Z","timestamp":1651816092000},"score":1,"resource":{"primary":{"URL":"http:\/\/services.igi-global.com\/resolvedoi\/resolve.aspx?doi=10.4018\/JOEUC.2020100105"}},"subtitle":[""],"short-title":[],"issued":{"date-parts":[[2020,10]]},"references-count":33,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.4018\/joeuc.2020100105","relation":{},"ISSN":["1546-2234","1546-5012"],"issn-type":[{"value":"1546-2234","type":"print"},{"value":"1546-5012","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,10]]}}}