Risk of Information Loss Using JWT Token

Kód výsledku v IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F44555601%3A13440%2F21%3A43897179" target="_blank" >RIV/44555601:13440/21:43897179 - isvavai.cz</a>

Výsledek na webu

<a href="https://ceur-ws.org/Vol-3101/Short21.pdf" target="_blank" >https://ceur-ws.org/Vol-3101/Short21.pdf</a>

DOI - Digital Object Identifier

—

Jazyk výsledku

angličtina

Název v původním jazyce

Risk of Information Loss Using JWT Token

Popis výsledku v původním jazyce

This paper presents a variant of saving the JWT token, which allows you to protect yourself from typical attacks on the server using an access token, which significantly reduces risks and simplifies compliance with some requirements of security standards. Shows how the web key interacts with the server, which provides protection against server-side attacks such as XSS and CSRF. The interaction of the JSON web key with the server and the solution of the main problems of authorization and storage of JWT - the JSON web token are considered. The experimental results show the advantage of the proposed method (&quot;quiet&quot; token) over using the storage of the JWT token in LocalStorage, cookie when accessing the token during XSS and CSRF attacks. The proposed method for storing the JWT token to protect data from typical attacks on the server. The lack of a token in local storage has the advantage of persisting data as the keys are no longer available information.

Název v anglickém jazyce

Risk of Information Loss Using JWT Token

Popis výsledku anglicky

This paper presents a variant of saving the JWT token, which allows you to protect yourself from typical attacks on the server using an access token, which significantly reduces risks and simplifies compliance with some requirements of security standards. Shows how the web key interacts with the server, which provides protection against server-side attacks such as XSS and CSRF. The interaction of the JSON web key with the server and the solution of the main problems of authorization and storage of JWT - the JSON web token are considered. The experimental results show the advantage of the proposed method (&quot;quiet&quot; token) over using the storage of the JWT token in LocalStorage, cookie when accessing the token during XSS and CSRF attacks. The proposed method for storing the JWT token to protect data from typical attacks on the server. The lack of a token in local storage has the advantage of persisting data as the keys are no longer available information.

Druh

D - Stať ve sborníku

CEP obor

—

OECD FORD obor

10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Projekt

—

Návaznosti

I - Institucionalni podpora na dlouhodoby koncepcni rozvoj vyzkumne organizace

Rok uplatnění

2021

Kód důvěrnosti údajů

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Název statě ve sborníku

CEUR Workshop Proceedings

ISBN

—

ISSN

1613-0073

e-ISSN

—

Počet stran výsledku

8

Strana od-do

292-299

Název nakladatele

CEUR-WS

Místo vydání

Cherson

Místo konání akce

Kherson

Datum konání akce

16. 9. 2021

Typ akce podle státní příslušnosti

WRD - Celosvětová akce

Kód UT WoS článku

—