<abstract xmlns="http://www.w3.org/1999/xhtml"><p>Modern web sites serve content that browsers fetch automatically from a number of different web servers that may be placed anywhere in the world. Such content is essential for defining the appearance and behavior of a web site and is thus a potential target for attacks. Many public administrations offer services on the web, thus we have entered a world in which web sites of public interest are continuously and systematically depending on web servers that may be located anywhere in the world and are potentially under control of other governments. In this work we focus on these issues by investigating the content included by almost 10000 web sites of the Italian Public Administration. We analyse the nature of such content, its quantity, its geographical location, the amount of dynamic variations over time. Our analyses demonstrate that the perimeter of trust of the Italian Public Administration collectively includes countries that are well beyond the control of the Italian government and provides several insights useful for implementing a centralized monitoring service aimed at detecting anomalies.</p></abstract>

Modern web sites serve content that browsers fetch automatically from a number of different web servers that may be placed anywhere in the world. Such content is essential for defining the appearance and behavior of a web site and is thus a potential target for attacks. Many public administrations offer services on the web, thus we have entered a world in which web sites of public interest are continuously and systematically depending on web servers that may be located anywhere in the world and are potentially under control of other governments. In this work we focus on these issues by investigating the content included by almost 10000 web sites of the Italian Public Administration. We analyse the nature of such content, its quantity, its geographical location, the amount of dynamic variations over time. Our analyses demonstrate that the perimeter of trust of the Italian Public Administration collectively includes countries that are well beyond the control of the Italian government and provides several insights useful for implementing a centralized monitoring service aimed at detecting anomalies.

A Security-Oriented Analysis of Web Inclusions in the Italian Public Administration

Dipartimento di Ingegneria e Architettura

Cybernetics and Information Technologies

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Modern web sites serve content that browsers fetch automatically from a number of different web servers that may be placed anywhere in the world. Such content...

A Security-Oriented Analysis of Web Inclusions in the Italian Public Administration

Publicado en línea: 14 dic 2018

Páginas: 94 - 110

Recibido: 02 sept 2018

Aceptado: 29 oct 2018

DOI: https://doi.org/10.2478/cait-2018-0050

Palabras clave
Web security, e-Government, Javascript

© 2018 A. Bartoli et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

A Security-Oriented Analysis of Web Inclusions in the Italian Public Administration

Publicado en línea: 14 dic 2018

Páginas: 94 - 110

Recibido: 02 sept 2018

Aceptado: 29 oct 2018

DOI: https://doi.org/10.2478/cait-2018-0050

Palabras claveWeb security, e-Government, Javascript

© 2018 A. Bartoli et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Palabras clave
Web security, e-Government, Javascript