Web Survey Bibliography
Purpose ‐ The purpose of this paper is to estimate the effectiveness of web application firewalls (WAFs) at preventing injection attacks by professional penetration testers given presence or absence of four conditions: whether there is an experienced operator monitoring the WAF; whether an automated black box tool has been used when tuning the WAF; whether the individual tuning the WAF is an experienced professional; and whether significant effort has been spent tuning the WAF. Design/methodology/approach ‐ Estimates on the effectiveness of WAFs are made for 16 operational scenarios utilizing judgments by 49 domain experts participating in a web survey. The judgments of these experts are pooled using Cooke's classical method. Findings ‐ The results show that the median prevention rate of a WAF is 80 percent if all measures have been employed. If no measure is employed then its median prevention rate is 25 percent. Also, there are no strong dependencies between any of the studied measures. Research limitations/implications ‐ The results are only valid for the attacker profile of a professional penetration tester who prepares one week for attacking a WA protected by a WAF. Practical implications ‐ The competence of the individual(s) tuning a WAF, employment of an automated black box tool for tuning and the manual effort spent on tuning are of great importance for the effectiveness of a WAF. The presence of an operator monitoring it has minor positive influence on its effectiveness. Originality/value ‐ WA vulnerabilities are widely considered a serious concern. To manage them in deployed software, many enterprises employ WAFs. However, the effectiveness of this type of countermeasure under different operational scenarios is largely unknown.
Homepage (Abstract)/ (Full text)
Web survey bibliography (4086)
- Social media data demands a marriage of high-tech and high-touch; 2013; Waldheim, C., Stevens, N.
- Book Review: Brand Together: How Co-creation Generates Innovation and Re-energizes Brands, by Nicholas...; 2013; Wilson, Al.
- Digging deeper: using implicit tests to define consumers' semantic network; 2013; Riviere, P., Cuny, C., Allain, G., Vereijken, C.
- Conceptualising and evaluating experiences with brands on Facebook; 2013; Smith, S.
- Estimates on the effectiveness of web application firewalls against targeted attacks; 2013; Holm, H., Ekstedt, M.
- Respondent Rewards: Money for Nothing?; 2013; Martin, P.
- How to make your questionnaire mobile-ready; 2013; Cape, P. J.
- Leveraging mobile and online qualitative to get inside shoppers’ heads; 2013; Bryson, J., Ritzo, J.
- A report on the Confirmit Market Research Software Survey 2013; 2013; Macer, T., Wilson, S.
- Thoughts on using the new online qualitative tools; 2013; Freund, N. M.
- Web Panel Representativeness; 2013; Bianchi, A., Biffignandi, S.
- Interactive applets on the Web for methods and statistics; 2013; McClelland, G., Reips, U.-D.
- Economic valuation in Web surveys; A review of the state of the art and best practices; 2013; Menegaki, A. N., Tsagarakis, K. P.
- Can creative web survey questionnaire design improve the response quality?; 2013; Angelovska, J., Mavrikiou, P. M.
- Beyond Satisfaction Questionnaires: “Hacking” the Online Survey; 2013; Evans, A. L.
- Use of mobile devices to answer online surveys: implications for research; 2013; Cunningham, J. A., Neighbors, C., Bertholet, N., Hendershot, C. S.
- Panel Conditioning in Difficult Attitudinal Questions; 2013; Binswanger, J., Schunk, D., Toepoel, V.
- Issues of Coverage and Sampling in Web Surveys for the General Population; 2013; Lynn, P.
- Optimizing quality of response through adaptive survey designs; 2013; Schouten, B., Calinescu, M., Luiten, A.
- Attitudes of Nebraska Residents on Nebraska Water Management; 2013; Dillman, D. A., Edwards, M. L.
- On the Impact of Response Patterns on Survey Estimates from Access Panels; 2013; Enderle, T., Muennich, R., Bruch, C.
- A Comparison of Data Quality Across Modes in a Mixed-Mode Collection of Administrative Records; 2013; Worthy, M., Mayclin, D.
- Reconceptualizing Survey Representativeness for Evaluating and Using Nonprobability Samples; 2013; Fan, D. P.
- To Click, Type, or Drag? Evaluating Speed of Survey Data Input Methods; 2013; Husser, J. A., Husser, J. A.
- Unit Nonresponse and Weighting Adjustments: A Critical Review; 2013; Brick, J. M.
- Internet visual media processing: a survey with graphics and vision applications; 2013; Hu, S.-M., Chen, T., Xu, K., Cheng, M.-M., Martin, R. R.
- Measuring the impact of the Web: Rasch modelling for survey evaluation; 2013; Annoni, P., Weziak-Bialowolska, D., Farhan, H.
- How incentives affect web-based survey response rates of athletic program donors; 2013; Alvarado, G., Callison, C.
- The Effect of Survey Mode on High School Risk Behavior Data: a Comparison between Web and Paper-based...; 2013; Raghupathy, S., Hahn-Smith, S.
- Going online with a face-to-face household panel: initial results from an experiment on the Understanding...; 2013; Jaeckle, A., Lynn, P., Burton, J.
- Targeted response inducement strategies on longitudinal surveys; 2013; Lynn, P.
- Permission email messages significantly increase gambler retention; 2013; Jolley, W., Lee, A., Mizerski, R., Sadeque, S.
- How virtual corporate social responsibility dialogs generate value: A framework and propositions; 2013; Korschun, D., Du, S.
- Customer loyalty to a commercial website: Descriptive meta-analysis of the empirical literature and...; 2013; Toufaily, E., Ricard, L., Perrien, J.
- Discovering interest groups for marketing in virtual communities: An integrated approach; 2013; Wang, K.-Y., Wu, H.-J., Ting, I.-H.
- Understanding service quality in a virtual travel community environment; 2013; Elliot, S., Li, G., Choi, C.
- Research note: E-store image, perceived value and perceived risk; 2013; Chang, E.-C., Tseng, Y.-F.
- The Gamification of Marketing Research; 2013; Donato, P., Link, M. W.
- Gamification Master Class; 2013; Puleston, J.
- Measuring Up: Impact of mobile and segmentation on respondent behaviour; 2013; Luck, K.
- Best of Both Worlds? Can we make convenience samples representative?; 2013; Doe, P.
- Multimode, Global Scale Usage: Understanding respondent scale usage across borders and devices; 2013; Pettit, F. A., Courtright, M.
- Why Big Data is a Small Idea…and Why You Shouldn’t Worry So Much; 2013; Needel, S.
- Advanced Research Methods Training in the UK: Current Provision and Future Strategies; 2013; Moley, S., Wiles, R., Sturgis, P.
- Doing real time research: Opportunities and challenges; 2013; Back, L., Lury, C., Zimmer, R.
- ‘Digital Methods as Mainstream Methodology’: Building capacity in the research community...; 2013; Roberts, S., Hine, C., Morey, Y., Snee, H., Watson, H.
- New social media, new social science?; 2013; Woodfield, K., Morrell, G.
- Digital technology and data collection; 2013; Henriksen, B., Jewitt, C., Price, S., Sakr, M.
- The impact of website content dimension and e-trust on e-marketing effectiveness: The case of Iranian...; 2013; Rahimnia, F., Farzaneh Hassanzadeh, J.
- Survey Breakoffs in a Computer-Assisted Telephone Interview; 2013; McGonagle, K.