XSSClassifier: An Efficient XSS Attack Detection Approach Based on Machine Learning Classifier on SNSs

Abstract

Social networking services (SNSs) such as Twitter, MySpace, and Facebook have become progressively significant with its billions of users. Still, alongside this increase is an increase in security threats such as crosssite scripting (XSS) threat. Recently, a few approaches have been proposed to detect an XSS attack on SNSs. Due to the certain recent features of SNSs webpages such as JavaScript and AJAX, however, the existing approaches are not efficient in combating XSS attack on SNSs. In this paper, we propose a machine learningbased approach to detecting XSS attack on SNSs. In our approach, the detection of XSS attack is performed based on three features: URLs, webpage, and SNSs. A dataset is prepared by collecting 1,000 SNSs webpages and extracting the features from these webpages. Ten different machine learning classifiers are used on a prepared dataset to classify webpages into two categories: XSS or non-XSS. To validate the efficiency of the proposed approach, we evaluated and compared it with other existing approaches. The evaluation results show that our approach attains better performance in the SNS environment, recording the highest accuracy of 0.972 and lowest false positive rate of 0.87.

An IND-CCA2 secure post-quantum encryption scheme and a secure cloud storage use case

“…It is obvious that the probability Pr[Evt 1 ∧ Evt 2 ] = 0 from the definition of Evt 1 and Evt 2 and we have While the event ¬Evt 1 ∧ ¬Evt 2 happens, A can not get any information about the connection between m b |con and u 1…”

“…semi-trusted. Thus, massive techniques are proposed for ensuring the data security and decreasing the useless data such as semi-supervised learning, spammer detection framework and cryptographic protocol [1][2][3][4].…”

User characteristics that influence judgment of social engineering attacks in social networks

“…One taxonomy [18] has classified the type of attack to be technical-based, which includes phishing, scam, and malware, or human-based, such as impersonation, identity theft, and reverse social engineering. An example of a technical based attack in social networks is the cross-site scripting attack that recently become popular among criminals in SNSs [19]. In contrast, persuading the victim to contact the attacker by connecting with the victim's friends through a reverse social engineering technique [8] is an example of a human-based attack in social networks.…”

Secure Cyber Deception Architecture and Decoy Injection to Mitigate the Insider Threat

“…The stationary security system uses security devices such as an IDS or attack detection mechanisms in application layer [22,23] to detect an attacker who has penetrated the inside. Unlike stationary security systems, MTD aims to deceive the attacker through constant network mutations rather than detecting an insider.…”