WebMTD: Defeating Cross-Site Scripting Attacks Using Moving Target Defense

<table class="algorithm-group"><tr><td><table class="algorithm" id="code2"><tr><td colspan="2">&lt;<span class="monospace">iframe src="javascript:alert(</span><svg height="9.22724pt" id="M4" style="vertical-align:-0.04981995pt" version="1.1" viewbox="-0.0498162 -9.17742 2.30486 9.22724" width="2.30486pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M119 710L42 683C46 669 61 568 71 474L99 486C107 548 122 682 125 705L119 710Z"></path></g></svg><span class="monospace">XSS</span><svg height="9.22724pt" id="M5" style="vertical-align:-0.04981995pt" version="1.1" viewbox="-0.0498162 -9.17742 2.30486 9.22724" width="2.30486pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M119 710L42 683C46 669 61 568 71 474L99 486C107 548 122 682 125 705L119 710Z"></path></g></svg><span class="monospace">)"</span>&gt;&lt;<span class="monospace">/</span></td></tr><tr><td colspan="2"><span style="margin-left:2.2222222222222223em"></span><span class="monospace">iframe</span>&gt;</td></tr></table></td></tr></table>

<div>Original injected HTML element.</div>

Security and Communication Networks

code2

Code 2

Code 2: WebMTD: Defeating Cross-Site Scripting Attacks Using Moving Target Defense 