.png){kind=icon}
返回
MFXSS: An effective XSS vulnerability detection method in JavaScript based on multi-feature model
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2022.103015.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The widespread use of web applications has also made them more vulnerable to hackers, resulting in the leakage of large amounts of application and personal privacy data. Cross-site scripting (XSS) attacks are one of the most significant threats to web applications. Attackers can inject scripts to control the victim's browser to send data or execute commands, leading to the theft of privacy or the hijacking of login to-kens. Therefore, we proposed a multi-feature fusion-based neural network vulnerability detection model for detecting XSS vulnerabilities in the JavaScript source code of websites (We termed our implementa-tion of this approach MFXSS). We combine abstract syntax tree (AST) and code control flow graph (CFG) to convert the generalized sample data into graph structure and code string structure. Then, through the graph convolutional neural network, weighted aggregation, and the bidirectional recurrent neural net-work, the logical call features and the context execution relationship features of the source code are extracted and fused respectively. Finally, the fused feature vectors are used to detect and predict XSS vulnerabilities in JavaScript. In the experiment, we designed multiple control experiments to verify that the model construction is optimal, and the accuracy rates in the standard and variant datasets are 0.997 and 0.986. Moreover, in comparing similar detection schemes, MFXSS also performs better. Applying the model to an actual web environment, we successfully detected the presence of XSS vulnerabilities in websites.(c) 2022 Elsevier Ltd. All rights reserved.
Keyword:
Cross -site scripting
Multi -feature fusion
Graph convolutional network
Weighted aggregation
Vulnerability detection
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
Re-Cloning the N27 Dopamine Cell Line to Improve a Cell Culture Model of Parkinson's Disease.png)
PLOS ONE
OAAI
PLOS ONEIF0
OAAI分享收藏Late Bronze Age climate change and the destruction of the Mycenaean Palace of Nestor at Pylos青铜时代晚期的气候变化和皮洛斯内斯特迈锡尼宫的破坏PLOS ONEOAAI
PLOS ONEIF0
OAAI分享收藏Framewise phoneme classification with bidirectional LSTM and other neural network architecturesNEURAL NETWORKS
NEURAL NETWORKSIF6.3
PREAI
分享收藏Understanding and improving deep learning-based rolling bearing fault diagnosis with attention mechanismSIGNAL PROCESSING
SIGNAL PROCESSINGIF3.6
PREAI
分享收藏GraphXSS: An efficient XSS payload detection approach based on graph convolutional networkCOMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
查看更多内容