Dynamic feature selection model for adaptive cross site scripting attack detection using developed multi-agent deep Q learning model
Web applications popularity has raised attention in various service domains, which increased the concern about cyber-attacks. One of these most serious and frequent web application attacks is a Cross-site scripting attack (XSS). It causes grievous harm to victims. Existing security methods against X...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Elsevier
2023
|
| Online Access: | http://psasir.upm.edu.my/id/eprint/107421/1/107421.pdf |
| _version_ | 1817927458418065408 |
|---|---|
| author | Kareem Thajeel, Isam Samsudin, Khairulmizam Hashim, Shaiful Jahari Hashim, Fazirulhisyam |
| author_facet | Kareem Thajeel, Isam Samsudin, Khairulmizam Hashim, Shaiful Jahari Hashim, Fazirulhisyam |
| author_sort | Kareem Thajeel, Isam |
| collection | UPM |
| description | Web applications popularity has raised attention in various service domains, which increased the concern about cyber-attacks. One of these most serious and frequent web application attacks is a Cross-site scripting attack (XSS). It causes grievous harm to victims. Existing security methods against XSS fail due to the evolving nature of XSS attacks. One evolving aspect of XSS attacks is feature drift which changes the feature relevancy and causes degradation in the performance. Unfortunately, dynamic awareness of drift occurrence is missing. Thus, this study attempts to fill the gap by proposing a feature drift-aware algorithm for detecting the evolved XSS attacks. The proposed approach is a dynamic feature selection based on a deep Q-network multi-agent feature selection (DQN-MAFS) framework. Each agent is associated with one feature and is responsible for selecting or deselecting its feature. DQN-MAFS provides a sub-model for reward distribution over agents, which is named as fair agent reward distribution based dynamic feature selection FARD-DFS. This framework is capable of supporting real-time, dynamic updates and adjustment of embedded knowledge as long as new labelled data arrives. DQN-MAFS has been evaluated using four real XSS attack datasets with various feature length sizes. The evaluation process was conducted and compared with state-of-the-art works. The obtained results show the superiority of our FARD-DFS over the benchmarks in terms of the majority of metrics. The improvement percentages of the mean accuracy and F1-measure ranged from 1.01 to 12.1 and from 0.55 to 6.88, respectively, in comparison with the benchmarks. This approach can be deployed as an autonomous detection system without the need for any offline retraining process of the model to detect the evolved XSS attack. |
| first_indexed | 2024-12-09T02:18:46Z |
| format | Article |
| id | upm.eprints-107421 |
| institution | Universiti Putra Malaysia |
| language | English |
| last_indexed | 2024-12-09T02:18:46Z |
| publishDate | 2023 |
| publisher | Elsevier |
| record_format | dspace |
| spelling | upm.eprints-1074212024-10-21T01:46:10Z http://psasir.upm.edu.my/id/eprint/107421/ Dynamic feature selection model for adaptive cross site scripting attack detection using developed multi-agent deep Q learning model Kareem Thajeel, Isam Samsudin, Khairulmizam Hashim, Shaiful Jahari Hashim, Fazirulhisyam Web applications popularity has raised attention in various service domains, which increased the concern about cyber-attacks. One of these most serious and frequent web application attacks is a Cross-site scripting attack (XSS). It causes grievous harm to victims. Existing security methods against XSS fail due to the evolving nature of XSS attacks. One evolving aspect of XSS attacks is feature drift which changes the feature relevancy and causes degradation in the performance. Unfortunately, dynamic awareness of drift occurrence is missing. Thus, this study attempts to fill the gap by proposing a feature drift-aware algorithm for detecting the evolved XSS attacks. The proposed approach is a dynamic feature selection based on a deep Q-network multi-agent feature selection (DQN-MAFS) framework. Each agent is associated with one feature and is responsible for selecting or deselecting its feature. DQN-MAFS provides a sub-model for reward distribution over agents, which is named as fair agent reward distribution based dynamic feature selection FARD-DFS. This framework is capable of supporting real-time, dynamic updates and adjustment of embedded knowledge as long as new labelled data arrives. DQN-MAFS has been evaluated using four real XSS attack datasets with various feature length sizes. The evaluation process was conducted and compared with state-of-the-art works. The obtained results show the superiority of our FARD-DFS over the benchmarks in terms of the majority of metrics. The improvement percentages of the mean accuracy and F1-measure ranged from 1.01 to 12.1 and from 0.55 to 6.88, respectively, in comparison with the benchmarks. This approach can be deployed as an autonomous detection system without the need for any offline retraining process of the model to detect the evolved XSS attack. Elsevier 2023-06 Article PeerReviewed text en cc_by_nc_nd_4 http://psasir.upm.edu.my/id/eprint/107421/1/107421.pdf Kareem Thajeel, Isam and Samsudin, Khairulmizam and Hashim, Shaiful Jahari and Hashim, Fazirulhisyam (2023) Dynamic feature selection model for adaptive cross site scripting attack detection using developed multi-agent deep Q learning model. Journal of King Saud University-Computer and Information Sciences, 35 (6). art. no. 101490. pp. 1-33. ISSN 1319-1578; eISSN: 2213-1248 https://www.sciencedirect.com/science/article/pii/S1319157823000204?via%3Dihub 10.1016/j.jksuci.2023.01.012 |
| spellingShingle | Kareem Thajeel, Isam Samsudin, Khairulmizam Hashim, Shaiful Jahari Hashim, Fazirulhisyam Dynamic feature selection model for adaptive cross site scripting attack detection using developed multi-agent deep Q learning model |
| title | Dynamic feature selection model for adaptive cross site scripting attack detection using developed multi-agent deep Q learning model |
| title_full | Dynamic feature selection model for adaptive cross site scripting attack detection using developed multi-agent deep Q learning model |
| title_fullStr | Dynamic feature selection model for adaptive cross site scripting attack detection using developed multi-agent deep Q learning model |
| title_full_unstemmed | Dynamic feature selection model for adaptive cross site scripting attack detection using developed multi-agent deep Q learning model |
| title_short | Dynamic feature selection model for adaptive cross site scripting attack detection using developed multi-agent deep Q learning model |
| title_sort | dynamic feature selection model for adaptive cross site scripting attack detection using developed multi agent deep q learning model |
| url | http://psasir.upm.edu.my/id/eprint/107421/1/107421.pdf |
| work_keys_str_mv | AT kareemthajeelisam dynamicfeatureselectionmodelforadaptivecrosssitescriptingattackdetectionusingdevelopedmultiagentdeepqlearningmodel AT samsudinkhairulmizam dynamicfeatureselectionmodelforadaptivecrosssitescriptingattackdetectionusingdevelopedmultiagentdeepqlearningmodel AT hashimshaifuljahari dynamicfeatureselectionmodelforadaptivecrosssitescriptingattackdetectionusingdevelopedmultiagentdeepqlearningmodel AT hashimfazirulhisyam dynamicfeatureselectionmodelforadaptivecrosssitescriptingattackdetectionusingdevelopedmultiagentdeepqlearningmodel |