Cross-Site Scripting Guardian: A Static XSS Detector Based on Data Stream Input-Output Association Mining

• Published in: Applied sciences Vol. 10; no. 14
• Main Authors: Li, Chenghao, Wang, Yiding, Miao, Changwei, Huang, Cheng
• Format: Journal Article
• Language: English
• Published: MDPI AG 15.07.2020
• Subjects: Accounting and auditing; Anti-virus software; Data mining; Machine learning; Methods; PHP; Safety and security measures; Source code; Web applications; China

The largest number of cybersecurity attacks is on web applications, in which Cross-Site Scripting (XSS) is the most popular way. The code audit is the main method to avoid the damage of XSS at the source code level. However, there are numerous limits implementing manual audits and rule-based audit t...