This paper focuses on UI redressing concerning different attack vectors and their counteractive measures. The primary goals are to understand how the attack and combinations of it work and to get knowledge about which safeguards are available. Regarding the safeguards, an automated detection system with statistics to scan web pages for clickjacking attacks will also be introduced. Last but not least, a conclusion is given with an outlook about how UI redressing can affect the future of web applications.
UI Redressing: Attacks and Countermeasures Revisited
By: Marcus Niemietz