Risk of Information Loss Using JWT Token

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F44555601%3A13440%2F21%3A43897179" target="_blank" >RIV/44555601:13440/21:43897179 - isvavai.cz</a>
Result on the web
<a href="https://ceur-ws.org/Vol-3101/Short21.pdf" target="_blank" >https://ceur-ws.org/Vol-3101/Short21.pdf</a>
DOI - Digital Object Identifier
—

Result language
angličtina
Original language name
Risk of Information Loss Using JWT Token
Original language description
This paper presents a variant of saving the JWT token, which allows you to protect yourself from typical attacks on the server using an access token, which significantly reduces risks and simplifies compliance with some requirements of security standards. Shows how the web key interacts with the server, which provides protection against server-side attacks such as XSS and CSRF. The interaction of the JSON web key with the server and the solution of the main problems of authorization and storage of JWT - the JSON web token are considered. The experimental results show the advantage of the proposed method ("quiet" token) over using the storage of the JWT token in LocalStorage, cookie when accessing the token during XSS and CSRF attacks. The proposed method for storing the JWT token to protect data from typical attacks on the server. The lack of a token in local storage has the advantage of persisting data as the keys are no longer available information.
Czech name
—
Czech description
—

Type
D - Article in proceedings
CEP classification
—
OECD FORD branch
10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Project
—
Continuities
I - Institucionalni podpora na dlouhodoby koncepcni rozvoj vyzkumne organizace

Publication year
2021
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Similar results(10)