跨站脚本攻击模式研究  

Attack Manner Mining in the XSS Included in URL

作　　者：赵学杰[1,2] 唐屹[1] 

机构地区：[1]广州大学数学与信息科学学院,广东广州510006 [2]德州学院数学系,山东德州250023

出　　处：《信息网络安全》2011年第11期62-64,共3页Netinfo Security

摘　　要：文章对将包含XSS攻击代码的HTTP URLs单词集合分为两部分。按一定粒度分词,运用Apriori算法挖掘攻击模式字符串频繁项集,并在此基础上运用类似Apriori算法思想的PrioriMerge子串合并算法得到攻击模式并统计其频率,实验结果表明算法能有效地挖掘出XSS攻击模式。In this paper,the HTTP URLs including XSS exploit codes was splited into two sets.Then the frequent patterns appearing in URLs including XSS exploit are mined through Apriori algorithm.On the basis of frequent patterns,a substring mergence algorithm based on the idea similar with Apriori＇s is presented to get attack manners.The experiment results show that our method achieve high performance.

关 键 词：XSS URL APRIORI算法 PrioriMerge算法 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]