首页> 外文期刊>Indian Journal of Science and Technology >A Framework for XSS Attack Prevention in Web Browser using Interceptor Approach
【24h】

A Framework for XSS Attack Prevention in Web Browser using Interceptor Approach

机译:使用拦截器方法防止Web浏览器中XSS攻击的框架

获取原文
       

摘要

Objectives: Cross site scripting attacks are performed through malicious JavaScript’s with the intention to attack client side. This paper proposes an efficient approach for detection of previous unknown malicious JavaScript attacks using machine learning techniques with high detection accuracy. Methods/Statistic Analysis: Despite the plethora of prevention and detection techniques, detection of malicious code such as XSS at the client side during execution by the browser is still a threatening and time-consuming process which degrades the browsing performance due to increased configuration overheads. The proposed approach can efficiently detect such attacks, which are in the form of malicious scripts before they get executed on the browser by employing an interceptor for all the HTTP traffic coming from the server to the client using machine learning classifiers for novel XSS attacks. Findings: It is expected that proposed framework once implemented will be able to achieve high detection accuracy with low false positives and fewer performance overheads. Improvement: This study provides a strong base for the detection of malware in real-time and experiments will be conducted based on this framework.
机译:目标:跨站点脚本攻击是通过恶意JavaScript进行的,旨在攻击客户端。本文提出了一种使用机器学习技术以高检测精度检测先前未知恶意JavaScript攻击的有效方法。方法/统计分析:尽管有大量的预防和检测技术,但是在浏览器执行期间在客户端检测恶意代码(例如XSS)仍然是一个威胁和耗时的过程,由于配置开销增加,这会降低浏览性能。所提出的方法可以通过使用拦截器,针对新颖的XSS攻击使用机器学习分类器,对从服务器到客户端的所有HTTP流量采用拦截器,从而有效地检测出此类攻击,使其以恶意脚本的形式在浏览器上执行之前。结果:预期所提议的框架一旦实施,将能够以低的误报率和更少的性能开销实现高检测精度。改进:该研究为实时检测恶意软件提供了坚实的基础,并且将基于此框架进行实验。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号