Evaluación de la eficiencia de ataques de tipo clickjacking y touchjacking en entornos controlados

Abstract

This degree project evaluates the methodologies of clickjacking and touchjacking attack in a controlled environment, being the main objective to determine the level of efficiency of each of these attacks under certain conditions, likewise mitigation measures suggested by authors within the research conducted are implemented, for the development of the research the following steps were performed: 1) Development of the attack scenario 2) Threat assessment of the attack scenario 3) Development of the attack tree 4) Critical vectors of the proposed scenario 5) Evaluation of attack and mitigation techniques.

For the research project an experimental method is used in order to modify each of the variables of the proposed scenarios and determine the effects caused in each of them, also a qualitative method is implemented in order to determine characteristics and conditions that may present a higher risk against this type of attacks.

The result of the analysis of clickjacking and touchjacking techniques seeks to establish sanitization measures and implementation of good practices, as well as the use of standards in web development to improve security within web applications.