Advanced Detection and Mitigation of Cross-Site Scripting Attacks through Intelligent JavaScript Code Injection Analysis

DOI

No DOI

Published In

Volume 2, Issue 2 (2023)

Published Online

May-August 2023

Pages

12-19

Article Type

Research Article

Check for updates

No DOI available for cross-reference

Cross-site scripting attack, abbreviated as XSS , has been an incessant problem for Web applications since the early 2000s. It is a code injection attack on the client -side where an attacker injects malicious payload intoavulner able we b applic ation, without client’s knowledge. The attacker is often successful in executing the malicious code inadvertently in the browser of an unwary user. Attempts have been made to implement the detection of XS S attacks using Genetic Algorithm, Web Vulnerabilities Finder, Fuzzy Interference Model, but they all come with drawbacks. Implementation URL of the website is collected through an extension and vulnerability is checked by injecting java-script code to the website. If the website is vulnerable, then display a pop -up stating “Website is vulnerable, be aware”, else display a pop -up stating “ W ebsite is not vulner able ”. It is a low cost model which is easy to implement.