Detection of Web Cross-Site Scripting (XSS) Attacks

被引：4

作者：

Alsaffar, Mohammad ^{[1
]}

Aljaloud, Saud ^{[1
]}

Mohammed, Badiea Abdulkarem ^{[2
,3
]}

Al-Mekhlafi, Zeyad Ghaleb ^{[1
,4
]}

Almurayziq, Tariq S. ^{[1
]}

Alshammari, Gharbi ^{[1
]}

Alshammari, Abdullah ^{[1
]}

机构：

[1] Univ Hail, Coll Comp Sci & Engn, Dept Informat & Comp Sci, Hail 81481, Saudi Arabia

[2] Univ Hail, Coll Comp Sci & Engn, Dept Comp Engn, Hail 81481, Saudi Arabia

[3] Hodeidah Univ, Coll Comp Sci & Engn, POB 3114, Al Hudaydah, Yemen

[4] Aden Community Coll, Aden 967, Yemen

来源：

ELECTRONICS | 2022年 / 11卷 / 14期

关键词：

XSS vulnerabilities; XSS; web security; web attacks;

D O I：

10.3390/electronics11142212

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

Most applications looking for XSS vulnerabilities have a variety of weaknesses related to the nature of constructing internet applications. Existing XSS vulnerability packages solely scan public net resources, which negatively influences the safety of internet resources. Threats may be in non-public sections of internet resources that can only be accessed by approved users. The aim of this work is to improve available internet functions for preventing XSS assaults by creating a programme that detects XSS vulnerabilities by completely mapping internet applications. The innovation of this work lies in its use of environment-friendly algorithms for locating extraordinary XSS vulnerabilities in addition to encompassing pre-approved XSS vulnerability scanning in examined internet functions to generate a complete internet resource map. Using the developed programme to discover XSS vulnerabilities increases the effectiveness of internet utility protection. This programme also simplifies the use of internet applications. Even customers unfamiliar with the fundamentals of internet security can use this programme due to its capability to generate a document with suggestions for rectifying detected XSS vulnerabilities.

引用

页数：13

共 21 条

[1] Al-Mekhlafi Z.G., 2021, COMMUN COMPUT PHYS, V1487, P447, DOI [10.1007/978-981-16-8059-5_27, DOI 10.1007/978-981-16-8059-5_27]
[2] Phishing Websites Detection by Using Optimized Stacking Ensemble Model
Al-Mekhlafi, Zeyad Ghaleb
Mohammed, Badiea Abdulkarem
Al-Sarem, Mohammed
Saeed, Faisal
Al-Hadhrami, Tawfik
Alshammari, Mohammad T.
Alreshidi, Abdulrahman
Alshammari, Talal Sarheed
[J]. COMPUTER SYSTEMS SCIENCE AND ENGINEERING, 2022, 41 (01): : 109 - 125
[3] An Improved Multiple Features and Machine Learning-Based Approach for Detecting Clickbait News on Social Networks
Al-Sarem, Mohammed
Saeed, Faisal
Al-Mekhlafi, Zeyad Ghaleb
Mohammed, Badiea Abdulkarem
Hadwan, Mohammed
Al-Hadhrami, Tawfik
Alshammari, Mohammad T.
Alreshidi, Abdulrahman
Alshammari, Talal Sarheed
[J]. APPLIED SCIENCES-BASEL, 2021, 11 (20):
[4] An Optimized Stacking Ensemble Model for Phishing Websites Detection
Al-Sarem, Mohammed
Saeed, Faisal
Al-Mekhlafi, Zeyad Ghaleb
Mohammed, Badiea Abdulkarem
Al-Hadhrami, Tawfik
Alshammari, Mohammad T.
Alreshidi, Abdulrahman
Alshammari, Talal Sarheed
[J]. ELECTRONICS, 2021, 10 (11)
[5] Barde S., 2021, TRANSFORMING CYBERSE, P55
[6] Crisan A, 2020, INT C INTELL COMP CO, P187, DOI [10.1109/ICCP51029.2020.9266139, 10.1109/iccp51029.2020.9266139]
[7] Da Rocha H., 2019, Learn Chart. js: Create interactive visualizations for the web with chart. js 2
[8] Devi R. Sri, 2020, 2020 4th International Conference on Trends in Electronics and Informatics (ICOEI). Proceedings, P354, DOI 10.1109/ICOEI48184.2020.9143018
[9] Gan J.-M., 2020, Revised Selected Papers, V2, P685
[10] Gupta BB., 2015, J. Inf. Priv. Secur, V11, P118, DOI DOI 10.1080/15536548.2015.1044865

← 1 2 3 →