So I'm doing my undergraduate thesis, I would like to explore how cross site scripting sql injections occur. And for the purpose of the thesis I'd also like to create a fictional website that is vulnerable to cross site scripting and sql injection and then evaluate the different ways that such attacks could be prevented by using vulnerability scanners and other methods. Though, I think this topic would be too simple for a thesis, does anyone have any suggestions on what else to add that would add some more complexity to this topic?


closed as primarily opinion-based by TildalWave, Adi, Xander, Rory Alsop Dec 29 '13 at 20:11

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 2
    Most universities provide counceling for students to pick a thesis topic. You should make use of that to find a topic which suits you and will have enough material to fulfill their requirements for a thesis. – Philipp Dec 29 '13 at 19:57
  • Hi sky - while this is an interesting question it is not on topic here. – Rory Alsop Dec 29 '13 at 20:12
  • 1
    This is a poor choice for a thesis topic because these attacks are so well understood and it is a difficult topic to expand upon. I would find a less popular topic. – rook Dec 30 '13 at 4:19
  • @Rook, what about if I compare how different website built by different technologies respond to xss,sql injections? – Sky Dec 31 '13 at 17:53

I wouldn't do it. Injection attacks have been in the wild for long time, and everyone (in this field) know about them.

As I see you are focusing on web applications, my suggestion is to take one of the vulnerabilities in the end positions of the OWASP's ranking, and then research about it.

  • hmm, sounds hope it's re searchable – Sky Dec 29 '13 at 16:56

Not the answer you're looking for? Browse other questions tagged or ask your own question.