Protection of Web Applications Using Aspect Oriented Programming and Performance Evaluation

Web application security is a critical issue. Security concerns are often scattered through different parts of the system. Aspect oriented programming is a programming paradigm that provides explicit mechanisms to modularize these concerns. In this paper we present an Aspect Oriented system for detecting and prevent common attacks in web applications like Cross Site Scripting (XSS) and SQL Injection and evaluate its performance by measuring the overhead introduced into the web application. The results of our tests show that this technique was effective in detecting attacks while maintaining a low performance overhead. General Terms Algorithms, Performance, Security