Application Research and Penetration Testing on WebSocket Technology

The WebSocket technology provides a bi-directional real time communications for web applications and services. This paper provides the study of the websocket protocol and describes the advantages they provide. This paper concerns about the security related to websockets, discuss the possible solutions and provide the practices for the deployment of the Websocket service. Also it proposes certain security frames that should be implemented in web browsers to ensure the security and privacy of the users. The WebSocket technology is not yet standardized but it is expected that usage of WebSockets will increase significantly in the near future. Overall, WebSockets solve connectivity problems, not the security problems. Several open issues exist, but with a good design and proper implementation of web browsers and web services, the risk level can be mitigated.