Stephy Maria A K (41718013)

Automated malicious web page scanner using machine learning classifiers - MPhil CS 2018-2019

The number and the importance of Web applications have increased rapidly
over the last years. Also, the number of web attacks are increasing day by
day. According to security experts, cross- site scripting is among the most
serious and common threats in Web applications today. Cross- site scripting
commonly occurs in the application-layer. It is classified into three categories
such as Stored XSS, Reflected XSS and DOM Based XSS. XSS vulnerabilities
target scripts embedded in a page that are executed on the client-side (web
browser) rather than on the server- side. Since manually preventing the XSS
attacks are time-consuming, error-prone and costly, the need for automated solutions
has become evident. In this work, we propose a web page vulnerability
scanner using machine-learning classifier to detect and prevent XSS attacks.
Also, we propose an intelligent agent based page blocking tool to block malicious
scripts/page. Here we are introducing multi-agents. The intelligent agents
communicate each other regarding the XSS attacks.In this work, we are using 3
agents. Level1 agent act as a sensor agent.It is responsible for handling incoming
request from the browser for web pages and it alerts level2 agent about a
URL request.Level2 agent is responsible for decision making and evaluation .It
act as a web watcher to detect attack and alarms a system about the attack.Also
alert level3 agent about the attack.Level3 agent act as an interface agent If
attacks happened, the intelligent agent perform appropriate actions (blocking
page/script).




WEB APPLICATIONS
WEB ATTACKS
XSS ATTACKS
MACHINE LEARNING