• DocumentCode
    3575148
  • Title

    Machine Learning Based Cross-Site Scripting Detection in Online Social Network

  • Author

    Rui Wang ; Xiaoqi Jia ; Qinlei Li ; Shengzhi Zhang

  • Author_Institution
    State Key Lab. of Inf. Security, Inst. of Inf. Eng., Beijing, China
  • fYear
    2014
  • Firstpage
    823
  • Lastpage
    826
  • Abstract
    Nowadays online social network (OSN) is one of the most popular internet services in the world. It allows us to communicate with others and share knowledge. However, from the security´s point of view, OSN is becoming the favorite target for the attackers, and is under a lot of threats such as cross-site scripting (XSS) attacks. In this paper, we present a novel approach using machine learning to do XSS detection in OSN. Firstly, we leverage a new method to capture identified features from web pages and then establish classification models which can be used in XSS detection. Secondly, we propose a novel method to simulate XSS worm spreading and build our webpage database. Finally, we set up experiments to verify the classification models using our test database. Our experiment results demonstrate that our approach is an effective countermeasure to detect the XSS attack.
  • Keywords
    Internet; database management systems; digital simulation; invasive software; learning (artificial intelligence); pattern classification; social networking (online); Internet services; OSN; Webpage database; XSS attacks; XSS worm spreading simulation; classification models; machine learning based cross-site scripting detection; online social network; security viewpoint; test database; Databases; Feature extraction; Grippers; HTML; Security; Social network services; Uniform resource locators; Cross-site Scripting; Machine learning; Online Social Network; XSS Detection;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    High Performance Computing and Communications, 2014 IEEE 6th Intl Symp on Cyberspace Safety and Security, 2014 IEEE 11th Intl Conf on Embedded Software and Syst (HPCC,CSS,ICESS), 2014 IEEE Intl Conf on
  • Print_ISBN
    978-1-4799-6122-1
  • Type

    conf

  • DOI
    10.1109/HPCC.2014.137
  • Filename
    7056839