MATHEMATICAL ALGORITHM FOR DETECTING XSS ATTACKS ON WEB APPLICATIONS

Recently, attacks on web applications, such as SQL injection and cross-site scripting (XSS), have tended to increase. In this article, we proposed a new algorithm for detecting XSS attacks on a web application based on the analysis of the frequency of occurrence of special characters. The paper proposes mathematical modeling and a method for identifying XSS attacks using a function bounded below that depends on the input string. To build this function, special characters and keywords were used, which are often found in the construction of XSS attacks. Mathematical modeling and identification of information objects plays an important role in solving the problems of pattern recognition. One such task is to detect attacks or normal requests to web applications. Research devoted to the study of the detection of attacks or normal requests to web applications began relatively recently. Nevertheless, there is a lot of research in this direction. In this paper, we propose mathematical modeling and a method for identifying XSS attacks using a function bounded below that depends on the input string. To build this feature, we used special characters and keywords that are often found in building XSS attacks. In the proposed method, it is possible to detect XSS attacks using one special character or one keyword. Nevertheless, it can be experimentally shown that the proposed detection method using a set of numerous characters and words allows us to determine more accurately the vulnerability of the type of XSS attacks. The aim of this work is to develop an algorithm for detecting XSS attacks. To achieve this, we focused on the characters that are often included in the XSS attack string.