Prevention of cross site request forgery in CRM

Abstract

The project aims to provide security against cross-site request forgery attack in CRM (customer relationship management). CRM system manages huge customer data. Cus- tomer data needs to be protected from the OWASP security risks. Which includes cross- site request forgery. This is a type of attack where unapproved actions are performed using a legitimate login session that the web application trusts. The current approach is using XSRF tokens to prevent CSRF attack in GWT application. PMD tool is used to analyze the use of vulnerable GWT APIs. CSRF Guard is used to defend against CSRF attack on JAVA platform. This module implements the CSRF guard con gurations for Oracle JET framework in CRM. CSRF token injection approach is introduced.