• Complex
  • Title
  • Keyword
  • Abstract
  • Scholars
  • Journal
  • ISSN
  • Conference
搜索

Author:

Mokbal Fawaz Mahiuob Mohammed (Mokbal Fawaz Mahiuob Mohammed.) | Wang Dan (Wang Dan.) | Wang Xiaoxi (Wang Xiaoxi.) | Fu Lihua (Fu Lihua.)

Indexed by:

EI Scopus SCIE PubMed

Abstract:

The rapid growth of the worldwide web and accompanied opportunities of web applications in various aspects of life have attracted the attention of organizations, governments, and individuals. Consequently, web applications have increasingly become the target of cyberattacks. Notably, cross-site scripting (XSS) attacks on web applications are increasing and have become the critical focus of information security experts' reports. Machine learning (ML) technique has significantly advanced and shown impressive results in the area of cybersecurity. However, XSS training datasets are often limited and significantly unbalanced, which does not meet well-developed ML algorithms' requirements and potentially limits the detection system efficiency. Furthermore, XSS attacks have multiple payload vectors that execute in different ways, resulting in many real threats passing through the detection system undetected. In this study, we propose a conditional Wasserstein generative adversarial network with a gradient penalty to enhance the XSS detection system in a low-resource data environment. The proposed method integrates a conditional generative adversarial network and Wasserstein generative adversarial network with a gradient penalty to obtain necessary data from directivity, which improves the strength of the security system over unbalance data. The proposed method generates synthetic samples of minority class that have identical distribution as real XSS attack scenarios. The augmented data were used to train a new boosting model and subsequently evaluated the model using a real test dataset. Experiments on two unbalanced XSS attack datasets demonstrate that the proposed model generates valid and reliable samples. Furthermore, the samples were indistinguishable from real XSS data and significantly enhanced the detection of XSS attacks compared with state-of-the-art methods.

Keyword:

Web applications security XSS Attack Conditional-Wasserstein generative adversarial net Data augmentation Imbalance dataset

Author Community:

  • [ 1 ] [Mokbal Fawaz Mahiuob Mohammed]College of Computer Science, Faculty of Information Technology, Beijing University of Technology, Beijing, China
  • [ 2 ] [Wang Dan]College of Computer Science, Faculty of Information Technology, Beijing University of Technology, Beijing, China
  • [ 3 ] [Wang Xiaoxi]State Grid Management College, Beijing, China
  • [ 4 ] [Fu Lihua]College of Computer Science, Faculty of Information Technology, Beijing University of Technology, Beijing, China

Reprint Author's Address:

Email:

Show more details

Related Keywords:

Related Article:

Source :

PeerJ. Computer science

ISSN: 2376-5992

Year: 2020

Volume: 6

Page: e328

3 . 8 0 0

JCR@2022

Cited Count:

WoS CC Cited Count:

SCOPUS Cited Count: 13

ESI Highly Cited Papers on the List: 0 Unfold All

WanFang Cited Count:

Chinese Cited Count:

30 Days PV: 2

Online/Total:857/10548002
Address:BJUT Library(100 Pingleyuan,Chaoyang District,Beijing 100124, China Post Code:100124) Contact Us:010-67392185
Copyright:BJUT Library Technical Support:Beijing Aegean Software Co., Ltd.