基于残差网络和GRU的XSS攻击检测方法

传统的XSS攻击及其漏洞检测方法在面对多样化的攻击payload时其效果难以令人满意,需要大量人工参与,具有较大的主观性;而如CNN、RNN等深度学习方法只能单一地学习数据样本的空间特征或时序特征.提出一种基于残差网络和GRU的XSS攻击检测方法,在CNN基础上引入残差框架并与GRU相结合来学习数据的时空特征,且通过利...

XSS Attack Detection Method Based on Residual Network and GRU

Traditional XSS attacks and their vulnerability detection methods are difficult to achieve satisfactory results in the face of diverse attack payloads, which require a lot of manual involvement and are highly subjective, and deep learning methods such as CNN and RNN can only learn spatial features or temporal features of data samples in a single way. This paper proposes an XSS attack detection method based on residual network and GRU, which introduces a residual framework based on CNN and combines GRU to learn the spatio-temporal features of data, and improves the generalization ability of the model by using dropout. In the face of the increasingly complex and variable XSS payload, this paper refers to character-level convolution to build a dictionary to encode the data samples so as to preserve the features of the original data and improve the overall efficiency, and then transforms it into a two-dimensional spatial matrix to make it meet the input requirements of CNN. The experimental results on the Github dataset show that the accuracy of this paper is 99.92% and the false alarm rate is 0.02%, the accuracy is 11.09 percentage points higher and the false alarm rate is 3.95 percentage points lower than the DNN method, and the other evaluation indexes are better than those of the GRU and CNN comparison methods.