DSpace Repository

ConvXSS: A deep learning-based smart ICT framework against code injection attacks for HTML5 web applications in sustainable smart city infrastructure

Show simple item record

dc.contributor.author Dua, Amit
dc.contributor.author Gupta, Shashank
dc.date.accessioned 2024-10-08T10:49:09Z
dc.date.available 2024-10-08T10:49:09Z
dc.date.issued 2022-05
dc.identifier.uri https://www.sciencedirect.com/science/article/pii/S2210670722000968
dc.identifier.uri http://dspace.bits-pilani.ac.in:8080/jspui/handle/123456789/16050
dc.description.abstract In this paper we propose ConvXSS, a novel deep learning approach for the detection of XSS and code injection attacks, followed by context-based sanitization of the malicious code if the model detects any malicious code in the application. Firstly, we briefly discuss XSS and code injection attacks that might pose threat to sustainable smart cities. Along with this, we discuss various approaches proposed previously for the detection and alleviation of these attacks followed by their respective limitations. Then we propose our deep learning model adopting whose novelty is based on the approach followed for Data Pre-Processing. Then we finally propose Context-based Sanitization to replace the malicious part of the code with sanitized code. Numerical experiments conducted on various datasets have shown various results out of which the best model has an accuracy of 99.42%, a precision of 99.81% and a recall of 99.35%. When compared with other state of the art techniques in this domain, our approach shows at par or in the best case, better results in terms of detection speed and accuracy of CSS attacks. en_US
dc.language.iso en en_US
dc.publisher Elsevier en_US
dc.subject Computer Science en_US
dc.subject Sustainable smart cities en_US
dc.subject Security en_US
dc.subject Privacy en_US
dc.subject Web security en_US
dc.subject Deep learning en_US
dc.subject Data preprocessing en_US
dc.subject Malicious code en_US
dc.subject Code injection attack en_US
dc.title ConvXSS: A deep learning-based smart ICT framework against code injection attacks for HTML5 web applications in sustainable smart city infrastructure en_US
dc.type Article en_US


Files in this item

Files Size Format View

There are no files associated with this item.

This item appears in the following Collection(s)

Show simple item record

Search DSpace


Advanced Search

Browse

My Account