A Browser-based Cross Site Request Forgery Detection Model

Abstract

CSRF is one of the most serious cyber attacks, and has been recognized as the main threat and one of the ten most serious vulnerabilities in web applications. The CSRF attack is when the attacker uses the implicit authentication mechanism of the HTTP protocol and the cookies cached in the browser to pass the authentication, and then executes the attack on the target website. In this article, we propose a browser-based CSRF detection model, which can detect CSRF attacks by analysing HTTP requests and web page content, thereby identifying the attacker's CSRF attacks.