面向XSS攻击的Web程序入侵识别的数学建模  

Mathematical Modeling of Web Program Intrusion Recognition for XSS Attacks

作　　者：白黎 BAI Li(Fuyang Preschool Teachers College,Fuyang 236015,China)

机构地区：[1]阜阳幼儿师范高等专科学校小学教育学院,安徽阜阳236015

出　　处：《常熟理工学院学报》2025年第2期107-114,共8页Journal of Changshu Institute of Technology

基　　金：阜阳幼儿师范高等专科学校2021年度校级科研项目重点项目“基于数学建模下的家庭经济困难认定指标量化分析——以阜阳幼儿师范高等专科学校为例”(ZK20210001)。

摘　　要：跨站脚本攻击(Cross-site Scripting,XSS)通过在目标网站中注入恶意脚本盗取用户数据或执行其他恶意操作.为保证Web程序的安全性,提出面向XSS攻击的Web程序入侵识别的数学建模方法.获取Web程序内的XSS入侵攻击行为集,将该攻击行为集作为输入,建立Web程序入侵识别数学模型.利用主成分分析法提取模块提取XSS入侵攻击行为集内的主成分,并利用空间特征学习模块获取XSS入侵攻击行为主成分特征.将该特征输入到特征增强模块进行增强后,使用长短期记忆网络进行特征学习,并通过Softmax分类识别模块输出Web程序XSS入侵攻击识别结果.实验表明:该方法可有效检测Web程序中不同类型的XSS入侵攻击,且识别XSS入侵攻击时间复杂度较低,应用效果较为显著.Cross site scripting(XSS)attacks steal user data or perform other malicious operations by injecting malicious scripts into the target website.In order to ensure the security of web programs,a mathematical modeling method for intrusion recognition of web programs targeting XSS attacks is proposed.The XSS intrusion attack behavior set within the web program is obtained as input,and a mathematical model for web program intrusion recognition is established.The principal components of the XSS intrusion attack behavior set are extracted by using principal component analysis,and the principal component features of the XSS intrusion attack behavior are obtained by using spatial feature learning module.After the feature is input into the feature enhancement module for enhancement,feature learning is performed by using long short-term memory network.And the recognition results of XSS intrusion attacks in web programs are output through the Softmax classification recognition module.The experiment shows that this method can effectively detect different types of XSS intrusion attacks in web programs,the time complexity of identifying XSS intrusion attacks is low,and the application effect is significant.

关 键 词：XSS攻击 WEB程序 入侵识别 数学建模 行为集函数 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]