Development of Mathematical Algorithm for Detecting XSS Attacks on Web Applications-Reference-Cited by-同舟云学术

Development of Mathematical Algorithm for Detecting XSS Attacks on Web Applications

Published:2024-06-24 Issue: Volume:23 Page:144-148
ISSN:2224-2872
Container-title:WSEAS TRANSACTIONS ON COMPUTERS
language:en
Short-container-title:

Author:

Kerimov Komil Fikratovich¹,Azizova Zarina Ildarovna²

Affiliation:

1. Department of System and Application Programming, Tashkent University of Information Technologies named after Muhammad al-Khwarizmi, 108 Amir Temur Avenue, Yunusabad paradise, 100084, Tashkent, REPUBLIC OF UZBEKISTAN

2. Department of Information Security, Tashkent University of Information Technologies named after Muhammad al-Khwarizmi, 108 Amir Temur Avenue, Yunusabad paradise, 100084, Tashkent, REPUBLIC OF UZBEKISTAN

Abstract

The widespread usage of web applications has led to an increase in security threats, with Cross-Site Scripting (XSS) attacks being one of the most prevalent and damaging. Detecting and mitigating XSS attacks is crucial to ensure the integrity and confidentiality of sensitive user data. This article presents the mathematical algorithm and a way to identify XSS attacks using a bounded function from below, which depends on the input string, and highlights its potential impact in bolstering web application security. To construct this function, we used special characters and keywords that are frequently found in the construction of XSS attacks.

Publisher

World Scientific and Engineering Academy and Society (WSEAS)

Reference9 articles.

1. Banerjee R., Baksi A., Singh N., Bishnu S.K., Detection of XSS in web applications using Machine Learning Classifiers, International Conference on Electronics, Materials Engineering & Nano-Technology (IEMENTech) 2020 4th, Kolkata, 2020, pp. 1-5, doi: 10.1109.

2. Monali Shetty, Chirantar Nalawade, Hybrid approach for Detection and Analysis of SQL and XSS vulnerabilities, International Journal of Engineering Trends and Technology, Vol.59,, 2018, pp. 37-41, doi: 10.14445/22315381/IJETT-V59P206.

3. Wassermann G., Su Z., Static detection of crosssite scripting vulnerabilities, 2008 ACM/IEEE 30th International Conference on Software Engineering, Leipzig, Germany, 2008, pp. 171- 180, doi: 10.1145/1368088.1368112.

4. Fawaz Mokbal, Dan Wang, Xiaoxi Wang, (2022). Detect Cross-Site Scripting Attacks Using Average Word Embedding and Support Vector Machine, International Journal of Network Security, Vol.24, No.20-28, doi: 10.6633/IJNS.202201.

5. Sanjukta Mohanty, Arup Abhinna Acharya, Detection of XSS Vulnerabilities of Web Application Using Security Testing Approaches, Intelligent and Cloud Computing, 2021, pp.267-275, doi: 10.1007/978-981-15- 6202-0_27.