<abstract xmlns="http://www.w3.org/1999/xhtml"><p>Modern web sites serve content that browsers fetch automatically from a number of different web servers that may be placed anywhere in the world. Such content is essential for defining the appearance and behavior of a web site and is thus a potential target for attacks. Many public administrations offer services on the web, thus we have entered a world in which web sites of public interest are continuously and systematically depending on web servers that may be located anywhere in the world and are potentially under control of other governments. In this work we focus on these issues by investigating the content included by almost 10000 web sites of the Italian Public Administration. We analyse the nature of such content, its quantity, its geographical location, the amount of dynamic variations over time. Our analyses demonstrate that the perimeter of trust of the Italian Public Administration collectively includes countries that are well beyond the control of the Italian government and provides several insights useful for implementing a centralized monitoring service aimed at detecting anomalies.</p></abstract>

Modern web sites serve content that browsers fetch automatically from a number of different web servers that may be placed anywhere in the world. Such content is essential for defining the appearance and behavior of a web site and is thus a potential target for attacks. Many public administrations offer services on the web, thus we have entered a world in which web sites of public interest are continuously and systematically depending on web servers that may be located anywhere in the world and are potentially under control of other governments. In this work we focus on these issues by investigating the content included by almost 10000 web sites of the Italian Public Administration. We analyse the nature of such content, its quantity, its geographical location, the amount of dynamic variations over time. Our analyses demonstrate that the perimeter of trust of the Italian Public Administration collectively includes countries that are well beyond the control of the Italian government and provides several insights useful for implementing a centralized monitoring service aimed at detecting anomalies.

A Security-Oriented Analysis of Web Inclusions in the Italian Public Administration

Dipartimento di Ingegneria e Architettura

Cybernetics and Information Technologies

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Modern web sites serve content that browsers fetch automatically from a number of different web servers that may be placed anywhere in the world. Such content...

A Security-Oriented Analysis of Web Inclusions in the Italian Public Administration

Published Online: Dec 14, 2018

Page range: 94 - 110

Received: Sep 02, 2018

Accepted: Oct 29, 2018

DOI: https://doi.org/10.2478/cait-2018-0050

Keywords
Web security, e-Government, Javascript

© 2018 A. Bartoli et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

A Security-Oriented Analysis of Web Inclusions in the Italian Public Administration

Published Online: Dec 14, 2018

Page range: 94 - 110

Received: Sep 02, 2018

Accepted: Oct 29, 2018

DOI: https://doi.org/10.2478/cait-2018-0050

KeywordsWeb security, e-Government, Javascript

© 2018 A. Bartoli et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Keywords
Web security, e-Government, Javascript