• Complex
  • Title
  • Keyword
  • Abstract
  • Scholars
  • Journal
  • ISSN
  • Conference
搜索

Author:

Mokbal, Fawaz Mahiuob Mohammed (Mokbal, Fawaz Mahiuob Mohammed.) | Wang, Dan (Wang, Dan.) | Wang, Xiaoxi (Wang, Xiaoxi.) | Fu, Lihua (Fu, Lihua.)

Indexed by:

EI Scopus SCIE PubMed

Abstract:

The rapid growth of the worldwide web and accompanied opportunities of web applications in various aspects of life have attracted the attention of organizations, governments, and individuals. Consequently, web applications have increasingly become the target of cyberattacks. Notably, cross-site scripting (XSS) attacks on web applications are increasing and have become the critical focus of information security experts' reports. Machine learning (ML) technique has significantly advanced and shown impressive results in the area of cybersecurity. However, XSS training datasets are often limited and significantly unbalanced, which does not meet well-developed ML algorithms' requirements and potentially limits the detection system efficiency. Furthermore, XSS attacks have multiple payload vectors that execute in different ways, resulting in many real threats passing through the detection system undetected. In this study, we propose a conditional Wasserstein generative adversarial network with a gradient penalty to enhance the XSS detection system in a low-resource data environment. The proposed method integrates a conditional generative adversarial network and Wasserstein generative adversarial network with a gradient penalty to obtain necessary data from directivity, which improves the strength of the security system over unbalance data. The proposed method generates synthetic samples of minority class that have identical distribution as real XSS attack scenarios. The augmented data were used to train a new boosting model and subsequently evaluated the model using a real test dataset. Experiments on two unbalanced XSS attack datasets demonstrate that the proposed model generates valid and reliable samples. Furthermore, the samples were indistinguishable from real XSS data and significantly enhanced the detection of XSS attacks compared with state-of-the-art methods.

Keyword:

XSS Attack Data augmentation Web applications security Conditional-Wasserstein generative adversarial net Imbalance dataset

Author Community:

  • [ 1 ] [Mokbal, Fawaz Mahiuob Mohammed]Beijing Univ Technol, Coll Comp Sci, Fac Informat Technol, Beijing, Peoples R China
  • [ 2 ] [Wang, Dan]Beijing Univ Technol, Coll Comp Sci, Fac Informat Technol, Beijing, Peoples R China
  • [ 3 ] [Fu, Lihua]Beijing Univ Technol, Coll Comp Sci, Fac Informat Technol, Beijing, Peoples R China
  • [ 4 ] [Mokbal, Fawaz Mahiuob Mohammed]ILMA Univ, Fac Comp Sci, Karachi, Pakistan
  • [ 5 ] [Wang, Xiaoxi]State Grid Management Coll, Beijing, Peoples R China

Reprint Author's Address:

  • [Mokbal, Fawaz Mahiuob Mohammed]Beijing Univ Technol, Coll Comp Sci, Fac Informat Technol, Beijing, Peoples R China;;[Mokbal, Fawaz Mahiuob Mohammed]ILMA Univ, Fac Comp Sci, Karachi, Pakistan

Show more details

Related Keywords:

Related Article:

Source :

PEERJ COMPUTER SCIENCE

ISSN: 2376-5992

Year: 2020

3 . 8 0 0

JCR@2022

Cited Count:

WoS CC Cited Count: 3

SCOPUS Cited Count: 14

ESI Highly Cited Papers on the List: 0 Unfold All

WanFang Cited Count:

Chinese Cited Count:

30 Days PV: 2

Affiliated Colleges:

Online/Total:528/5288580
Address:BJUT Library(100 Pingleyuan,Chaoyang District,Beijing 100124, China Post Code:100124) Contact Us:010-67392185
Copyright:BJUT Library Technical Support:Beijing Aegean Software Co., Ltd.