Detekcija verzije zadane JavaScript biblioteke

undergraduate thesis

• Title (english): Detecting version of a given JavaScript library
• Author: Vilim Pagon
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Ivan Kovačević (član povjerenstva)
• Committee member: Bruno Štengl (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2022-07-04, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

U ovom radu prikazani su problemi koji se javljaju kao rezultat nedovoljno predane važnosti sigurnosti te je detaljno prikazan rad algoritma razvijenog u svrhu detekcije verzije JavaScript biblioteke. Algoritam detektira verziju nepoznate biblioteke na temelju promjena u susjednim verzijama poznatih biblioteka. Uz to su prikazani i rezultati u obliku uspješnosti algoritma. Iz njih se može vidjeti da Web stranice na hrvatskom Web prostoru, odnosno biblioteke koje one koriste nisu redovito ažurirane. Rješenje je napravljeno da se može izvršavati periodički i automatizirano na poslužitelju. Kao najveći problem pokazalo se vrijeme izvršavanja koje je eksponencijalno s obzirom na broj biblioteka koje treba analizirati. To ne predstavlja problem iz razloga što kad se jednom pokrene na poslužitelju, može ga se ostaviti da radi koliko god je to potrebno. Na kraju rada, navedena su i ograničenja, ali isto tako i moguća potencijalna poboljšanja algoritma.

Abstract (english)

This paper presents the problems that arise as a result of insufficiently committed importance of security and presents in detail functionalities of the algorithm developed for the purpose of detecting the version of the JavaScript library. The algorithm detects a version of an unknown library based on differences between neighboring versions of known libraries. The results in the form of algorithm performance are also presented. From them it can be seen that the Websites on the Croatian Web space are not regularly updated, that is the libraries they use. The solution is designed to run periodically and automatically on the server. The biggest problem proved to be is execution time, which is exponential with respect to the number of libraries to be analyzed. This is not a problem because once it runs on the server it can be left running for as long as it takes. At the end of the paper, the limitations are listed, but also the potential improvements of the algorithm.

• Keywords: sigurnost; ranjivosti Weba; detekcija verzije biblioteke
• Keywords (english): security; Web vulnerabilities; library version detection
• Language: croatian
• URN:NBN: urn:nbn:hr:168:573826
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-15 10:57:13