A Survey Paper on Browser Extensions to Detect Web Attacks

Browser extensions that have been specifically designed to detect online attacks are able to add a layer of security for users as they browse the internet. Their popularity can be attributed to the ever-increasing need for personalized browsing experiences and the rising demand for enhanced security measures to combat web-based threats. Recently, web attacks and their mitigation have become a trending topic in modern research. Acquiring knowledge about how attacks are mitigated with the assistance of browser extensions would enable researchers to better understand the results of their scientific investigations and thus enhance reproducibility. A comprehensive review of the literature was conducted to assess the current best practices for detecting browser attacks using web extensions. This review provides an overview of the available extensions used for identifying attacks. Our analysis primarily focuses on OWASP attacks that are currently being detected while also highlighting the limitations of existing extensions in the market and their technical approaches, which can be categorized as either traditional or machine learning-based models.

I. Introduction

In recent years, web attacks have become increasingly common and sophisticated, posing a serious threat to online security. Hackers are constantly finding new ways to exploit vulnerabilities in web applications, leading to a steady increase in the number and complexity of these attacks. Retail is the most targeted sector, followed by technology and financial services. Cross-site scripting (XSS), SQLi, CSRF, and Local File Inclusion (LFI) are some of the most prevalent types of web attacks, with XSS attacks being the most frequent. These statistics emphasize the importance of implementing robust security ‘measures, such as browser extensions, to prevent web attacks. As attackers become more sophisticated and automated, it is essential that individuals and organizations take proactive steps to protect themselves from web-based threats. This includes staying up-to-date on the latest security threats, using strong passwords and two-factor authentication, and being careful about what information they share online. Different extensions exist which implement different methods of detecting individual attacks like CSRF, XSS, etc but there isn’t any single extension that detects multiple attacks.