面向XSS攻击的恶意软件Web入侵检测技术

Malicious Software Web Intrusion Detection Technology for XSS Attack

为了提高跨站脚本(XSS)攻击检测性能,提出面向XSS攻击的恶意软件Web入侵检测技术。逐层划分技术方案实施的注意事项,在分布式结构的基础上,利用入侵检测模块获取日志与攻击向量数据库信息,添加蚁群聚类下的Web入侵检测技术。聚类结果依照实例数量高低排序,若聚类簇值小于异常临界值认定是正常行为,反之为XSS攻击行为。通过日志数据库服务器模块把日志信息传输到关系数据库,使用MySQL服务连接日志数据库,查询并更新日志信息。最终在日志分析控制台模块上,以图表化形式将入侵信息呈现给用户。仿真分析结果表明,所提技术具有较高的数据处理能力、检测精度和Web网络安全性。

In order to improve the performance of cross site scripting(XSS)attack detection,a malware Web intrusion detection technology for XSS attack is proposed.Based on the distributed structure,the intrusion detection module is used to obtain the information of log and attack vector database,and the Web intrusion detection technology under ant colony clustering is added.The clustering results are sorted according to the number of instances.If the cluster value is less than the abnormal critical value,it is considered as normal behavior,otherwise it is XSS attack behavior.The log information is transfered to the relational database through the log database server module,the log database is connected with MySQL service,the log information is queried and updated.Finally,on the log analysis console module,the intrusion information is presented to users in the form of charts.The simulation results show that the proposed technology has high data processing ability,detection accuracy and Web network security.