This paper proposes the automatic detection algorithm of XSS. The proposed algorithm utilizes probabilistic approach since the feature of end user's input on the web application is hopefully normal, but sometimes attack (malicious). In terms of statistical decision theory, the proposed algorithm is obtained by the Bayes optimal prediction based on the non-stationary Bernoulli process. Finally, our approach is validated by the simulation experiments with various data of inputs of web applications.
5th Mosharaka International Conference on Communications, Computers and Applications (MIC-CCA 2012)
Congress
2012 Global Congress on Communications, Computers and Applications (GC-CCA 2012), 12-14 October 2012, Istanbul, Turkey
Pages
--1
Topics
Internet and Web Security Security Algorithms and Vulnerability Analysis
ISSN
2227-331X
DOI
BibTeX
@inproceedings{473CCA2012,
title={On the Automatic Detection Algorithm of Cross Site Scripting (XSS) with the Non-Stationary Bernoulli Distribution},
author={Daiki Koizumi, and Takeshi Matsuda, and Michio Sonoda},
booktitle={2012 Global Congress on Communications, Computers and Applications (GC-CCA 2012)},
year={2012},
pages={--1},
doi={}},
organization={Mosharaka for Research and Studies}
}