並列摘要
With the rapid development of web technology, more and more services are delivered to users through the use of it, which also resulted in a ever increasing number of attacks aiming to gain benefit from it. Clickjacking attack is a new attack which tricks users to perform privacy-leaking operations unknowingly. Most of the previously suggested protection schemes depend on server-site participation. Though there are some client-site solutions proposed, there is still a need for a client-site protection scheme which can be easily incoporated to any commonly used web browser and do not inhibit the functionality of any benign web content. In this paper, we investigate the characteristics of the currently known types of clickjacking attacks, and devise client-side employable schemes for the detection and prevention of these attacks . The schemes have been implemented as an extension to one of the commonly used web browser, Chrome. Our experiments show that the proposed schemes can prevent web contents contaminated with clickjacking attacks from achieving their goals.