Cross-Site Scripting(XSS)remains a significant threat to web application security,exploiting vulnerabilities to hijack user sessions and steal sensitive data.Traditional detection methods often fail to keep pace with ...Cross-Site Scripting(XSS)remains a significant threat to web application security,exploiting vulnerabilities to hijack user sessions and steal sensitive data.Traditional detection methods often fail to keep pace with the evolving sophistication of cyber threats.This paper introduces a novel hybrid ensemble learning framework that leverages a combination of advanced machine learning algorithms—Logistic Regression(LR),Support Vector Machines(SVM),eXtreme Gradient Boosting(XGBoost),Categorical Boosting(CatBoost),and Deep Neural Networks(DNN).Utilizing the XSS-Attacks-2021 dataset,which comprises 460 instances across various real-world trafficrelated scenarios,this framework significantly enhances XSS attack detection.Our approach,which includes rigorous feature engineering and model tuning,not only optimizes accuracy but also effectively minimizes false positives(FP)(0.13%)and false negatives(FN)(0.19%).This comprehensive methodology has been rigorously validated,achieving an unprecedented accuracy of 99.87%.The proposed system is scalable and efficient,capable of adapting to the increasing number of web applications and user demands without a decline in performance.It demonstrates exceptional real-time capabilities,with the ability to detect XSS attacks dynamically,maintaining high accuracy and low latency even under significant loads.Furthermore,despite the computational complexity introduced by the hybrid ensemble approach,strategic use of parallel processing and algorithm tuning ensures that the system remains scalable and performs robustly in real-time applications.Designed for easy integration with existing web security systems,our framework supports adaptable Application Programming Interfaces(APIs)and a modular design,facilitating seamless augmentation of current defenses.This innovation represents a significant advancement in cybersecurity,offering a scalable and effective solution for securing modern web applications against evolving threats.展开更多
Cloud computing is a transformational paradigm involving the delivery of applications and services over the Internet,using access mechanisms through microprocessors,smartphones,etc.Latency time to prevent and detect m...Cloud computing is a transformational paradigm involving the delivery of applications and services over the Internet,using access mechanisms through microprocessors,smartphones,etc.Latency time to prevent and detect modern and complex threats remains one of the major challenges.It is then necessary to think about an intrusion prevention system(IPS)design,making it possible to effectively meet the requirements of a cloud computing environment.From this analysis,the central question of the present study is to minimize the latency time for efficient threat prevention and detection in the cloud.To design this IPS design in a cloud computing environment,Azure environment(Microsoft)and its concept of Virtual Private Cloud(VPC)were used.Then,an IPS design was deployed with a ruleset from a mined dataset(via K-means clustering)and processed.Finally,the correlation between the traffic analyzed(virtual network traffic in real-time,logs)and the filtering rules or ruleset of this IPS made it possible to obtain and discuss on a precision rate of around 0.9 in True Positive Rate(TPR)in the prevention Cross-Site Scripting(XSS)attacks targeting the cloud,for a latent time of approximately 6.4 ms.Subsequently,it is important to think about extending the detection capabilities,attack complexity,and high traffic consideration of this IPS.展开更多
We report on the properties of strong pulses from PSR B0656＋14 by analyzing the data obtained using the Urumqi 25-m radio telescope at 1540 MHz from August 2007 to September 2010.In 44 h of observational data,a total...We report on the properties of strong pulses from PSR B0656＋14 by analyzing the data obtained using the Urumqi 25-m radio telescope at 1540 MHz from August 2007 to September 2010.In 44 h of observational data,a total of 67 pulses with signal-to-noise ratios above a 5σthreshold were detected.The peak flux densities of these pulses are 58 to 194 times that of the average profile,and their pulse energies are 3 to 68 times that of the average pulse.These pulses are clustered around phases about 5-ahead of the peak of the average profile.Compared with the width of the average profile,they are relatively narrow,with the full widths at half-maximum ranging from 0.28 ° to 1.78 °.The distribution of pulse-energies follows a lognormal distribution.These sporadic strong pulses detected from PSR B0656＋14 have different characteristics from both typical giant pulses and its regular pulses.展开更多
In recent years,Power Shell has increasingly been reported as appearing in a variety of cyber attacks.However,because the PowerShell language is dynamic by design and can construct script fragments at different levels...In recent years,Power Shell has increasingly been reported as appearing in a variety of cyber attacks.However,because the PowerShell language is dynamic by design and can construct script fragments at different levels,state-of-the-art static analysis based Power Shell attack detection approaches are inherently vulnerable to obfuscations.In this paper,we design the first generic,effective,and lightweight deobfuscation approach for PowerShell scripts.To precisely identify the obfuscated script fragments,we define obfuscation based on the differences in the impacts on the abstract syntax trees of PowerShell scripts and propose a novel emulation-based recovery technology.Furthermore,we design the first semantic-aware PowerShell attack detection system that leverages the classic objective-oriented association mining algorithm and newly identifies 31 semantic signatures.The experimental results on 2342 benign samples and 4141 malicious samples show that our deobfuscation method takes less than 0.5 s on average and increases the similarity between the obfuscated and original scripts from 0.5%to 93.2%.By deploying our deobfuscation method,the attack detection rates for Windows Defender and VirusTotal increase substantially from 0.33%and 2.65%to 78.9%and 94.0%,respectively.Moreover,our detection system outperforms both existing tools with a 96.7%true positive rate and a 0%false positive rate on average.展开更多
基金supported by Princess Nourah bint Abdulrahman University Researchers Supporting Project number(PNURSP2024R513),Princess Nourah bint Abdulrahman University,Riyadh,Saudi Arabia.
文摘Cross-Site Scripting(XSS)remains a significant threat to web application security,exploiting vulnerabilities to hijack user sessions and steal sensitive data.Traditional detection methods often fail to keep pace with the evolving sophistication of cyber threats.This paper introduces a novel hybrid ensemble learning framework that leverages a combination of advanced machine learning algorithms—Logistic Regression(LR),Support Vector Machines(SVM),eXtreme Gradient Boosting(XGBoost),Categorical Boosting(CatBoost),and Deep Neural Networks(DNN).Utilizing the XSS-Attacks-2021 dataset,which comprises 460 instances across various real-world trafficrelated scenarios,this framework significantly enhances XSS attack detection.Our approach,which includes rigorous feature engineering and model tuning,not only optimizes accuracy but also effectively minimizes false positives(FP)(0.13%)and false negatives(FN)(0.19%).This comprehensive methodology has been rigorously validated,achieving an unprecedented accuracy of 99.87%.The proposed system is scalable and efficient,capable of adapting to the increasing number of web applications and user demands without a decline in performance.It demonstrates exceptional real-time capabilities,with the ability to detect XSS attacks dynamically,maintaining high accuracy and low latency even under significant loads.Furthermore,despite the computational complexity introduced by the hybrid ensemble approach,strategic use of parallel processing and algorithm tuning ensures that the system remains scalable and performs robustly in real-time applications.Designed for easy integration with existing web security systems,our framework supports adaptable Application Programming Interfaces(APIs)and a modular design,facilitating seamless augmentation of current defenses.This innovation represents a significant advancement in cybersecurity,offering a scalable and effective solution for securing modern web applications against evolving threats.
文摘Cloud computing is a transformational paradigm involving the delivery of applications and services over the Internet,using access mechanisms through microprocessors,smartphones,etc.Latency time to prevent and detect modern and complex threats remains one of the major challenges.It is then necessary to think about an intrusion prevention system(IPS)design,making it possible to effectively meet the requirements of a cloud computing environment.From this analysis,the central question of the present study is to minimize the latency time for efficient threat prevention and detection in the cloud.To design this IPS design in a cloud computing environment,Azure environment(Microsoft)and its concept of Virtual Private Cloud(VPC)were used.Then,an IPS design was deployed with a ruleset from a mined dataset(via K-means clustering)and processed.Finally,the correlation between the traffic analyzed(virtual network traffic in real-time,logs)and the filtering rules or ruleset of this IPS made it possible to obtain and discuss on a precision rate of around 0.9 in True Positive Rate(TPR)in the prevention Cross-Site Scripting(XSS)attacks targeting the cloud,for a latent time of approximately 6.4 ms.Subsequently,it is important to think about extending the detection capabilities,attack complexity,and high traffic consideration of this IPS.
基金funded by the National Natural Science Foundation of China(Grant No.10973026)
文摘We report on the properties of strong pulses from PSR B0656＋14 by analyzing the data obtained using the Urumqi 25-m radio telescope at 1540 MHz from August 2007 to September 2010.In 44 h of observational data,a total of 67 pulses with signal-to-noise ratios above a 5σthreshold were detected.The peak flux densities of these pulses are 58 to 194 times that of the average profile,and their pulse energies are 3 to 68 times that of the average pulse.These pulses are clustered around phases about 5-ahead of the peak of the average profile.Compared with the width of the average profile,they are relatively narrow,with the full widths at half-maximum ranging from 0.28 ° to 1.78 °.The distribution of pulse-energies follows a lognormal distribution.These sporadic strong pulses detected from PSR B0656＋14 have different characteristics from both typical giant pulses and its regular pulses.
基金supported by the National Natural Science Foundation of China(No.U1936215)。
文摘In recent years,Power Shell has increasingly been reported as appearing in a variety of cyber attacks.However,because the PowerShell language is dynamic by design and can construct script fragments at different levels,state-of-the-art static analysis based Power Shell attack detection approaches are inherently vulnerable to obfuscations.In this paper,we design the first generic,effective,and lightweight deobfuscation approach for PowerShell scripts.To precisely identify the obfuscated script fragments,we define obfuscation based on the differences in the impacts on the abstract syntax trees of PowerShell scripts and propose a novel emulation-based recovery technology.Furthermore,we design the first semantic-aware PowerShell attack detection system that leverages the classic objective-oriented association mining algorithm and newly identifies 31 semantic signatures.The experimental results on 2342 benign samples and 4141 malicious samples show that our deobfuscation method takes less than 0.5 s on average and increases the similarity between the obfuscated and original scripts from 0.5%to 93.2%.By deploying our deobfuscation method,the attack detection rates for Windows Defender and VirusTotal increase substantially from 0.33%and 2.65%to 78.9%and 94.0%,respectively.Moreover,our detection system outperforms both existing tools with a 96.7%true positive rate and a 0%false positive rate on average.
