algoXSSF:通过机器学习算法检测与分析跨站请求伪造(XSRF)和跨站脚本(XSS)攻击
algoXSSF: Detection and analysis of cross-site request forgery (XSRF) and cross-site scripting (XSS) attacks via Machine learning algorithms
AI总结:
针对网络攻击频发的问题,研究团队提出嵌入机器学习算法的algoXSSF框架,用于检测分析XSRF、XSS及中间人等网站恶意攻击,助力网络安全防御。
摘要:
全球在线用户与在线设备数量的增长最终推动了全球互联网人口的增加,同时也催生了多种网络犯罪与网络攻击。我们需要结合新兴技术与人工智能、深度学习、机器学习领域的强大算法,来强化网络安全防御,应对针对多个搜索引擎和网站的攻击。网络犯罪与网站攻击的增长率前所未有,促使人们考虑采用新技术来保护在线数据与信息。近期针对网站、网络域名的网络攻击持续发生,伴随数据泄露事件,例如GitHub账户遭黑、Twitter数据泄露、WordPress插件含恶意软件、Tomcat服务器存在漏洞等,不胜枚举。\n我们对两类主要网络攻击(尽管攻击类型还有很多)——跨站请求伪造(XSRF)和跨站脚本(XSS)攻击开展了深入研究,并进行了检测与分析。借助机器学习与AI算法,能够轻松识别网络攻击趋势与模式,并持续优化。机器学习算法的应用除了检测之外,对抗击XSRF和XSS攻击也极具帮助。我们开发了嵌入机器学习算法的算法与网络防御框架algoXSSF,用于检测和分析针对网站的恶意攻击(包括中间人攻击)。
英文摘要:
The global rise of online users and online devices has ultimately given rise to the global internet population apart from several cybercrimes and cyberattacks. The combination of emerging new technology and powerful algorithms (of Artificial Intelligence, Deep Learning, and Machine Learning) is needed to counter defense web security including attacks on several search engines and websites. The unprecedented increase rate of cybercrime and website attacks urged for new technology consideration to protect data and information online. There have been recent and continuous cyberattacks on websites, web domains with ongoing data breaches including - GitHub account hack, data leaks on Twitter, malware in WordPress plugins, vulnerability in Tomcat server to name just a few. We have investigated with an in-depth study apart from the detection and analysis of two major cyberattacks (although there are many more types): cross-site request forgery (XSRF) and cross-site scripting (XSS) attacks. The easy identification of cyber trends and patterns with continuous improvement is possible within the edge of machine learning and AI algorithms. The use of machine learning algorithms would be extremely helpful to counter (apart from detection) the XSRF and XSS attacks. We have developed the algorithm and cyber defense framework - algoXSSF with machine learning algorithms embedded to combat malicious attacks (including Man-in-the-Middle attacks) on websites for detection and analysis.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。