Security Analysis of the Chinese Web: How well is it protected?

摘要: As the web rapidly expands and gets integrated into daily lives of more people, so does number cyber attacks against it. To defend attackers, website operators can utilize a wide range defense mechanisms, both at server-side, as well client-side their applications. From security-metrics standpoint, presence or absence these mechanisms be used security indicator any given website.In this paper, through large-scale analysis 10,000 most popular Chinese websites, we analyze by investigating usage policies, evaluating discovered HTTPS implementations. We show that, when compared to websites rest world, significant fraction lag behind on adoption good practices. Among other findings, report fact that 6% inadvertently leak private user information, such identity numbers, placing spreadsheet files with sensitive content in directories indexed search engines.