SFC: A Three Layer Smart Phone-Fag-Cloud Framework for Defending Against JavaScript Code Injection Vulnerabilities on OSN

This article introduced a Fog centric model in the proximity of smart phone devices and virtual Cloud Data Centers (CDC) that senses and avoids an execution of JavaScript code injection vulnerabilities on Online Social Network (OSN). Such offline CDC statically computes the features of clustered-sanitized compressed patterns of JavaScript attack vectors embedded in the HTTP response messages and inject them on the online edge servers of Fog Computing network. The online edge web server dynamically re-computes the features of JavaScript code and compares these features with the statically calculated features in offline mode. Any discrepancy observed in these features will alarm the signal of injection of malicious script code on the edge server. The prototype of our Fog centric framework was developed in Java and installed on the offline virtual machines of Cloud platforms and online edge servers of Fog computing architecture. The online evaluation results exposed that the JavaScript attack vectors sensing rate of our work is high with tolerable rate of False Negatives (FNs), False Positives (FPs) and lesser overall performance overhead during the peak congestion of generation of sanitized HTTP response on the fog nodes.

I. Introduction

Cloud computing exempted the smart phone industries and their consumers from handling the description of countless specifics, like loading resources and computation constraints [1]. However, existing Cloud computing prototypes cannot satisfy their necessities of motion provision, position alertness and low latency [2]. In addition, the virtual machines of Cloud platforms cannot support end points with rich facilities, comprising the applications with small latency necessities. The reason behind such non-optimal performance is that the virtual machines of mobile cloud platforms perform the computation at the core of the network, which is very far away from ground level. To solve such concerns between smart phone networks and Cloud data centres, a novel platform (i.e. Fog Computing) is established that stretches the setup of cloud to an edge network [3]. This computing platform executes the calculation of information on the ground level. It commonly executes its calculation between the CDC of the core network and the network of smart equipment as shown in the fig. 1. The infrastructure of Fog computing consists of geographical distributed Fog servers that are located at an edge of the network and facilitates the smart phone users with location-based services. Fig. 1.

Abstract view of fog computing architecture