A Security-Oriented Analysis of Web Inclusions in the Italian Public Administration

摘要

Modern web sites serve content that browsers fetch automatically from anumber of different web servers that may be placed anywhere in the world. Suchcontent is essential for defining the appearance and behavior of a web site and is thusa potential target for attacks. Many public administrations offer services on the web,thus we have entered a world in which web sites of public interest are continuouslyand systematically depending on web servers that may be located anywhere in theworld and are potentially under control of other governments. In this work we focuson these issues by investigating the content included by almost 10000 web sites of theItalian Public Administration. We analyse the nature of such content, its quantity, itsgeographical location, the amount of dynamic variations over time. Our analysesdemonstrate that the perimeter of trust of the Italian Public Administrationcollectively includes countries that are well beyond the control of the Italiangovernment and provides several insights useful for implementing a centralizedmonitoring service aimed at detecting anomalies.