Swift Detection of XSS Attacks: Enhancing XSS Attack Detection by Leveraging Hybrid Semantic Embeddings and AI Techniques

被引:6
作者
Bakir, Rezan [1 ]
Bakir, Halit [1 ]
机构
[1] Sivas Univ Sci & Technol, Dept Comp Engn, Sivas, Turkiye
关键词
Universal Sentence Encoder; Word2vec; Word embedding; XSS attack; Machine learning; Deep learning;
D O I
10.1007/s13369-024-09140-0
中图分类号
O [数理科学和化学]; P [天文学、地球科学]; Q [生物科学]; N [自然科学总论];
学科分类号
07 ; 0710 ; 09 ;
摘要
Cross-Site Scripting (XSS) attacks continue to be a significant threat to web application security, necessitating robust detection mechanisms to safeguard user data and ensure system integrity. In this study, we present a novel approach for detecting XSS attacks that harnesses the combined capabilities of the Universal Sentence Encoder (USE) and Word2Vec embeddings as a feature extractor, aiming to enhance the performance of machine learning and deep learning techniques. By leveraging the semantic understanding of sentences offered by USE and the word-level representations from Word2Vec, we obtain a comprehensive feature representation for XSS attack payloads. Our proposed approach aims to capture both fine-grained word meanings and broader sentence contexts, leading to enhanced feature extraction and improved model performance. We conducted extensive experiments utilizing machine learning and deep learning architectures to evaluate the effectiveness of our approach. The obtained results demonstrate that our combined embeddings approach outperforms traditional methods, achieving superior accuracy, precision, recall, ROC, and F1-score in detecting XSS attacks. This study not only advances XSS attack detection but also highlights the potential of state-of-the-art natural language processing techniques in web security applications. Our findings offer valuable insights for the development of more robust and effective security measures against XSS attacks.
引用
收藏
页码:1191 / 1207
页数:17
相关论文
共 38 条
[1]   A novel technique to prevent SQL injection and cross-site scripting attacks using Knuth-Morris-Pratt string match algorithm [J].
Abikoye, Oluwakemi Christiana ;
Abubakar, Abdullahi ;
Dokoro, Ahmed Haruna ;
Akande, Oluwatobi Noah ;
Kayode, Aderonke Anthonia .
EURASIP JOURNAL ON INFORMATION SECURITY, 2020, 2020 (01)
[2]   MNN-XSS: Modular Neural Network Based Approach for XSS Attack Detection [J].
Alqarni, Ahmed Abdullah ;
Alsharif, Nizar ;
Khan, Nayeem Ahmad ;
Georgieva, Lilia ;
Pardade, Eric ;
Alzahrani, Mohammed Y. .
CMC-COMPUTERS MATERIALS & CONTINUA, 2022, 70 (02) :4075-4085
[3]   DroidEncoder: Malware detection using auto-encoder based feature extractor and machine learning algorithms [J].
Bakir, Halit ;
Bakir, Rezan .
COMPUTERS & ELECTRICAL ENGINEERING, 2023, 110
[4]   DeepVisDroid: android malware detection by hybridizing image-based features with deep learning techniques [J].
Bakour, Khaled ;
Unver, Halil Murat .
NEURAL COMPUTING & APPLICATIONS, 2021, 33 (18) :11499-11516
[5]   A Deep Camouflage: Evaluating Android's Anti-malware Systems Robustness Against Hybridization of Obfuscation Techniques with Injection Attacks [J].
Bakour, Khaled ;
Unver, Halil Murat ;
Ghanem, Razan .
ARABIAN JOURNAL FOR SCIENCE AND ENGINEERING, 2019, 44 (11) :9333-9347
[6]  
Bakour K, 2017, 2017 INTERNATIONAL CONFERENCE ON COMPUTER SCIENCE AND ENGINEERING (UBMK), P215, DOI 10.1109/UBMK.2017.8093378
[7]  
Banerjee R., 2020, 2020 4 INT C EL MAT, P1, DOI DOI 10.1109/IEMENTECH51367.2020.9270052
[8]  
Cer Daniel, 2018, ARXIV
[9]  
Erol D, 2023, International Conference on Pioneer and Innovative Studies, V1, P274, DOI 10.59287/icpis.844
[10]   RLXSS: Optimizing XSS Detection Model to Defend Against Adversarial Attacks Based on Reinforcement Learning [J].
Fang, Yong ;
Huang, Cheng ;
Xu, Yijia ;
Li, Yang .
FUTURE INTERNET, 2019, 11 (08)