Automated malicious web page scanner using machine learning classifiers
- MPhil CS 2018-2019
The number and the importance of Web applications have increased rapidly over the last years. Also, the number of web attacks are increasing day by day. According to security experts, cross- site scripting is among the most serious and common threats in Web applications today. Cross- site scripting commonly occurs in the application-layer. It is classified into three categories such as Stored XSS, Reflected XSS and DOM Based XSS. XSS vulnerabilities target scripts embedded in a page that are executed on the client-side (web browser) rather than on the server- side. Since manually preventing the XSS attacks are time-consuming, error-prone and costly, the need for automated solutions has become evident. In this work, we propose a web page vulnerability scanner using machine-learning classifier to detect and prevent XSS attacks. Also, we propose an intelligent agent based page blocking tool to block malicious scripts/page. Here we are introducing multi-agents. The intelligent agents communicate each other regarding the XSS attacks.In this work, we are using 3 agents. Level1 agent act as a sensor agent.It is responsible for handling incoming request from the browser for web pages and it alerts level2 agent about a URL request.Level2 agent is responsible for decision making and evaluation .It act as a web watcher to detect attack and alarms a system about the attack.Also alert level3 agent about the attack.Level3 agent act as an interface agent If attacks happened, the intelligent agent perform appropriate actions (blocking page/script).
WEB APPLICATIONS WEB ATTACKS XSS ATTACKS MACHINE LEARNING