MNN-XSS: Modular Neural Network Based Approach for XSS Attack Detection
Source abstract
Abstract
The rapid growth and uptake of network-based communication technologies have made cybersecurity a significant challenge as the number of cyber-attacks is also increasing. A number of detection systems are used in an attempt to detect known attacks using signatures in network traffic. In recent years, researchers have used different machine learning methods to detect network attacks without relying on those signatures. The methods generally have a high false-positive rate which is not adequate for an industry-ready intrusion detection product. In this study, we propose and implement a new method that relies on a modular deep neural network for reducing the false positive rate in the XSS attack detection system. Experiments were performed using a dataset consists of 1000 malicious and 10000 benign sample. The model uses 50 features selected by using Pearson correlation method and will be used in the detection and preventions of XSS attacks. The results obtained from the experiments depict improvement in the detection accuracy as high as 99.96% compared to other approaches.
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Advanced Malware Detection Techniques · Spam and Phishing Detection
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (32)
Show source-provided references
1. Defending malicious script attacks using machine learning classifiers
2. Yar · Cybercrime and Society · 2019
3. “Symantec corporation annual report-2019,” 2019. [Online]. Available: https://docs.broadcom.com/doc/istr-24-2019-en.
4. Examining risks and protective factors of on-line identity theft10.1080/01639625.2011.584050 ↗
5. “Open Web Application Security Project report 2020: Top 10 Web application security risks, 2020,” 2020. [Online]. Available: https://owasp.org/www-project-top-ten/.
6. Towards vulnerability prevention model for web browser using interceptor approach
7. A dynamic method of detecting malicious scripts using classifiers10.1166/asl.2017.7374 ↗
8. Static detection of malicious JavaScript-bearing PDF documents
9. Obfuscated malicious JavaScript detection using classification techniques
10. Hybrid feature classification approach for malicious javaScript attack detection using deep learning
11. A survey on machine learning-based malware detection in executable files
12. Cross site scripting (XSS) attack detection using intrusion detection system
13. Obfuscation techniques against signature-based detection
14. Heuristic-based strategy for phishing prediction: A survey of URL-based approach10.1016/j.cose.2019.101613 ↗
15. Review on the research and practice of deep learning and reinforcement learning in smart grids10.17775/CSEEJPES.2018.00520 ↗
16. Efficient malicious code detection using n-gram analysis and SVM
17. Predicting cross-cite scripting (XSS) security vulnerabilities in web applications
18. Mining SQL injection and cross site scripting vulnerabilities using hybrid program analysis
19. DeepXSS: Cross site scripting detection based on deep learning
20. J. W. Stokes, R. Agrawal and G. McDonald, “Neural classification of malicious scripts: A study with JavaScript and vbscript,” arXiv preprint arXiv: 1805.05603, 2018.
21. Word2vec10.1017/S1351324916000334 ↗
22. Word embedding models: Word2vec, Camembert and USE
23. An introduction to variable and feature selection
24. “Spss tutorials: Pearson correlation,” Kent University Library Tutorial, 2021. [Online]. Available: https://libguies.lides.library.kent.edu/SPSS/PearsonCorr.
25. Sigmis: A feature selection algorithm using correlation based method10.1260/1748-3018.6.3.385 ↗
26. “Class correlationAttributeEval,” WEKA, University of Waikato, New Zealand, 2020. [Online]. Available: https://weka.sourceforge.io/doc.dev/weka/attributeSelection/CorrelationAttributeEval.html.
27. Neural network and artificial immune systems for malware and network intrusion detection
28. Pumping optimization of coastal aquifers based on evolutionary algorithms and surrogate modular neural network models10.1016/j.advwatres.2009.01.001 ↗
29. Modular neural network-based directional relay for transmission line protection10.1109/TPWRS.2005.857839 ↗
30. Data mining techniques for analyzing healthcare conditions of urban space-person lung meta-heuristic optimized neural networks10.1007/s10586-020-03127-w ↗
31. Data augmentation-based conditional wasserstein generative adversarial network-gradient penalty for XSS attack detection system10.7717/peerj-cs.328 ↗
32. Cross-ite scripting attack (XSS) dataset