Results 31 to 40 of about 1,001 (205)

A Survey of Exploitation and Detection Methods of XSS Vulnerabilities

open access: yesIEEE Access, 2019
As web applications become more prevalent, web security becomes more and more important. Cross-site scripting vulnerability abbreviated as XSS is a kind of common injection web vulnerability.
Miao Liu   +3 more
doaj   +1 more source

Cross Site Scripting (XSS) Attack Dataset (2020): Generating Data for Dataset Balancing

open access: yes, 2020
Real unbalanced datasets for cross-site scripting (XSS ...
Fawaz Mokbal (9455363)
core   +1 more source

Machine and Deep Learning-based XSS Detection Approaches: A Systematic Literature Review

open access: yesJournal of King Saud University: Computer and Information Sciences, 2023
Web applications are paramount tools for facilitating services providing in the modern world. Unfortunately, the tremendous growth in the web application usage has resulted in a rise in cyberattacks. Cross-site scripting (XSS) is one of the most frequent
Isam Kareem Thajeel   +3 more
doaj   +1 more source

State-Sensitive Black-Box Web Application Scanning for Cross-Site Scripting Vulnerability Detection

open access: yesApplied Sciences, 2023
Black-box web application scanning has been a popular technique to detect Cross-Site Scripting (XSS) vulnerabilities without prior knowledge of the application. However, several limitations lead to low efficiency of current black-box scanners, including (
Tianxiang Zhang   +4 more
doaj   +1 more source

CODDLE: Code-Injection Detection With Deep Learning

open access: yesIEEE Access, 2019
Code Injection attacks such as SQL Injection and Cross-Site Scripting (XSS) are among the major threats for today's web applications and systems. This paper proposes CODDLE, a deep learning-based intrusion detection systems against web-based code ...
Stanislav Abaimov, Giuseppe Bianchi
doaj   +1 more source

Providing Email Privacy by Preventing Webmail from Loading Malicious XSS Payloads

open access: yesApplied Sciences, 2020
With the development of internet technology, email has become the formal communication method in modern society. Email often contains a large amount of personal privacy information, possible business agreements, and sensitive attachments, which make ...
Yong Fang   +3 more
doaj   +1 more source

Structural Learning of Attack Vectors for Generating Mutated XSS Attacks [PDF]

open access: yesElectronic Proceedings in Theoretical Computer Science, 2010
Web applications suffer from cross-site scripting (XSS) attacks that resulting from incomplete or incorrect input sanitization. Learning the structure of attack vectors could enrich the variety of manifestations in generated XSS attacks.
Yi-Hsun Wang   +2 more
doaj   +1 more source

XSS-Dec: A Hybrid Solution to Mitigate Cross-Site Scripting Attacks [PDF]

open access: yes, 2012
Cross-site scripting attacks represent one of the major security threats in today's Web applications. Current approaches to mitigate cross-site scripting vulnerabilities rely on either server-based or client-based defense mechanisms. Although effective for many attacks, server-side protection mechanisms may leave the client vulnerable if the server is ...
Smitha Sundareswaran   +1 more
openaire   +1 more source

Application Research of BiLSTM in Cross-Site Scripting Detection

open access: yesJisuanji kexue yu tansuo, 2020
At present, machine learning methods are used in the most traditional cross-site scripting (XSS) detection technologies, which have some defects, such as bad readability because of maliciously confused code, insufficient feature extraction and low ...
CHENG Qiqin, WAN Liang
doaj   +1 more source

XSS Peeker: A Systematic Analysis of Cross-site Scripting Vulnerability Scanners

open access: yesCoRR, 2014
Since the first publication of the "OWASP Top 10" (2004), cross-site scripting (XSS) vulnerabilities have always been among the top 5 web application security bugs. Black-box vulnerability scanners are widely used in the industry to reproduce (XSS) attacks automatically.
Enrico Bazzoli   +3 more
openaire   +2 more sources

Home - About - Disclaimer - Privacy