Abstract

Among web application vulnerabilities, XSS is the most frequently occurring. Where a web application accepts a user-input, it is possible for such vulnerability to inject malicious scripts. The greater part of the literature concentrated on the application of static analysis in order to locate XSS vulnerabilities. The reason for this is its capability of achieving effectively a 100 percent code coverage and observing every path of the program. Nevertheless, the main restriction of static analysis, being the false positive rate shown in the results, continues. Consequently, researchers began to merge static analysis with other algorithms, such as genetic algorithm, machine learning and pattern matching. This is to improve the XSS detection results as well as the static analysis run time. This essay defines the algorithms which formerly improved the static analysis outcomes regarding XSS vulnerability detection. Furthermore, each method’s restriction was mentioned in which the studies continue to lack an efficient detection of XSS vulnerability in PHP web application.

Full Text
Paper version not known

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call

Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.