Cross-site scripting detection based on an enhanced genetic algorithm
Software security vulnerabilities have led to many successful attacks on applications, especially web applications, on a daily basis. These attacks, including cross-site scripting, have caused damages for both web site owners and users. Cross-site scripting vulnerabilities are easy to exploit but di...
| Main Authors: | , , , |
|---|---|
| Format: | Conference or Workshop Item |
| Language: | English |
| Published: |
Science and Knowledge Research Society
2015
|
| Online Access: | http://psasir.upm.edu.my/id/eprint/67005/1/ICCSCM-6.pdf |
| _version_ | 1796978422181789696 |
|---|---|
| author | Hydara, Isatou Md Sultan, Abu Bakar Zulzalil, Hazura Admodisastro, Novia Indriaty |
| author_facet | Hydara, Isatou Md Sultan, Abu Bakar Zulzalil, Hazura Admodisastro, Novia Indriaty |
| author_sort | Hydara, Isatou |
| collection | UPM |
| description | Software security vulnerabilities have led to many successful attacks on applications, especially web applications, on a daily basis. These attacks, including cross-site scripting, have caused damages for both web site owners and users. Cross-site scripting vulnerabilities are easy to exploit but difficult to mitigate. Many solutions have been proposed for their detection. However, the problem of cross-site scripting vulnerabilities present in web applications still persists. In this paper, we propose to explore an approach based on genetic algorithms that will be able to detect cross-site scripting vulnerabilities in the source code before an application is deployed. The proposed approach is, so far, only implemented and validated on Java-based Web applications, although it can be implemented in other programming languages with slight modifications. Initial evaluations have indicated promising results. |
| first_indexed | 2024-03-06T09:54:20Z |
| format | Conference or Workshop Item |
| id | upm.eprints-67005 |
| institution | Universiti Putra Malaysia |
| language | English |
| last_indexed | 2024-03-06T09:54:20Z |
| publishDate | 2015 |
| publisher | Science and Knowledge Research Society |
| record_format | dspace |
| spelling | upm.eprints-670052019-03-06T05:35:18Z http://psasir.upm.edu.my/id/eprint/67005/ Cross-site scripting detection based on an enhanced genetic algorithm Hydara, Isatou Md Sultan, Abu Bakar Zulzalil, Hazura Admodisastro, Novia Indriaty Software security vulnerabilities have led to many successful attacks on applications, especially web applications, on a daily basis. These attacks, including cross-site scripting, have caused damages for both web site owners and users. Cross-site scripting vulnerabilities are easy to exploit but difficult to mitigate. Many solutions have been proposed for their detection. However, the problem of cross-site scripting vulnerabilities present in web applications still persists. In this paper, we propose to explore an approach based on genetic algorithms that will be able to detect cross-site scripting vulnerabilities in the source code before an application is deployed. The proposed approach is, so far, only implemented and validated on Java-based Web applications, although it can be implemented in other programming languages with slight modifications. Initial evaluations have indicated promising results. Science and Knowledge Research Society 2015 Conference or Workshop Item PeerReviewed text en http://psasir.upm.edu.my/id/eprint/67005/1/ICCSCM-6.pdf Hydara, Isatou and Md Sultan, Abu Bakar and Zulzalil, Hazura and Admodisastro, Novia Indriaty (2015) Cross-site scripting detection based on an enhanced genetic algorithm. In: 4th International Conference on Computer Science and Computational Mathematics (ICCSCM 2015), 7-8 May 2015, Langkawi, Malaysia. (pp. 654-659). |
| spellingShingle | Hydara, Isatou Md Sultan, Abu Bakar Zulzalil, Hazura Admodisastro, Novia Indriaty Cross-site scripting detection based on an enhanced genetic algorithm |
| title | Cross-site scripting detection based on an enhanced genetic algorithm |
| title_full | Cross-site scripting detection based on an enhanced genetic algorithm |
| title_fullStr | Cross-site scripting detection based on an enhanced genetic algorithm |
| title_full_unstemmed | Cross-site scripting detection based on an enhanced genetic algorithm |
| title_short | Cross-site scripting detection based on an enhanced genetic algorithm |
| title_sort | cross site scripting detection based on an enhanced genetic algorithm |
| url | http://psasir.upm.edu.my/id/eprint/67005/1/ICCSCM-6.pdf |
| work_keys_str_mv | AT hydaraisatou crosssitescriptingdetectionbasedonanenhancedgeneticalgorithm AT mdsultanabubakar crosssitescriptingdetectionbasedonanenhancedgeneticalgorithm AT zulzalilhazura crosssitescriptingdetectionbasedonanenhancedgeneticalgorithm AT admodisastronoviaindriaty crosssitescriptingdetectionbasedonanenhancedgeneticalgorithm |