• 综合
  • 标题
  • 关键词
  • 摘要
  • 学者
  • 期刊-刊名
  • 期刊-ISSN
  • 会议名称
搜索

作者:

Mokbal, Fawaz Mahiuob Mohammed (Mokbal, Fawaz Mahiuob Mohammed.) | Dan, Wang (Dan, Wang.) | Imran, Azhar (Imran, Azhar.) | Lin Jiuchuan (Lin Jiuchuan.) | Akhtar, Faheem (Akhtar, Faheem.) | Wang Xiaoxi (Wang Xiaoxi.)

收录:

SCIE

摘要:

Dynamic web applications play a vital role in providing resources manipulation and interaction between clients and servers. The features presently supported by browsers have raised business opportunities, by supplying high interactivity in web-based services, like web banking, e-commerce, social networking, forums, and at the same time, these features have brought serious risks and increased vulnerabilities in web applications that enable cyber-attacks to be executed. One of the common high-risk cyber-attack of web application vulnerabilities is cross-site scripting (XSS). Nowadays, XSS is still dramatically increasing and considered as one of the most severe threats for organizations, users, and developers. If the ploy is successful, the victim is at the mercy of the cybercriminals. In this research, a robust artificial neural network-based multilayer perceptron (MLP) scheme integrated with the dynamic feature extractor is proposed for XSS attack detection. The detection scheme adopts a large real-world dataset, the dynamic features extraction mechanism, and MLP model, which successfully surpassed several tests on an employed unique dataset under careful experimentation, and achieved promising and state-of-the-art results with accuracy, detection probabilities, false positive rate, and AUC-ROC scores of 99.32%, 98.35 %, 0.3%, and 99.02%, respectively. Therefore, it has the potentials to be applied for XSS-based attack detection in either the client-side or the server-side.

关键词:

cross-site scripting attack web application security detection Artificial neural network multilayer perceptrons

作者机构:

  • [ 1 ] [Mokbal, Fawaz Mahiuob Mohammed]Beijing Univ Technol, Coll Comp Sci, Beijing 100124, Peoples R China
  • [ 2 ] [Dan, Wang]Beijing Univ Technol, Coll Comp Sci, Beijing 100124, Peoples R China
  • [ 3 ] [Imran, Azhar]Beijing Univ Technol, Coll Software Engn, Beijing 100124, Peoples R China
  • [ 4 ] [Akhtar, Faheem]Beijing Univ Technol, Coll Software Engn, Beijing 100124, Peoples R China
  • [ 5 ] [Lin Jiuchuan]Minist Publ Secur, Key Lab Informat Network Secur, Res Inst 3, Shanghai 201204, Peoples R China
  • [ 6 ] [Akhtar, Faheem]Sukkur IBA Univ, Dept Comp Sci, Sukkur 65200, Pakistan
  • [ 7 ] [Wang Xiaoxi]State Grid Management Coll, Beijing 102200, Peoples R China

通讯作者信息:

  • [Mokbal, Fawaz Mahiuob Mohammed]Beijing Univ Technol, Coll Comp Sci, Beijing 100124, Peoples R China

电子邮件地址:

查看成果更多字段

相关关键词:

来源 :

IEEE ACCESS

ISSN: 2169-3536

年份: 2019

卷: 7

页码: 100567-100580

3 . 9 0 0

JCR@2022

JCR分区:1

被引次数:

WoS核心集被引频次: 48

SCOPUS被引频次: 75

ESI高被引论文在榜: 0 展开所有

万方被引频次:

中文被引频次:

近30日浏览量: 2

在线人数/总访问数:214/3771948
地址:北京工业大学图书馆(北京市朝阳区平乐园100号 邮编:100124) 联系我们:010-67392185
版权所有:北京工业大学图书馆 站点建设与维护:北京爱琴海乐之技术有限公司