• Home
  • Search
  • IGXSS: XSS payload detection model based on inductive GCN
  • Cite Icon3
  • https://doi.org/10.1002/nem.2264Copy DOI Icon

IGXSS: XSS payload detection model based on inductive GCN

Show More
  • Abstract
  • Literature Map
  • References
  • Citations
  • Similar Papers
Abstract

Abstract To facilitate the management, Internet of Things (IoT) vendors usually apply remote ways such as HTTP services to uniformly manage IoT devices, leading to traditional web application vulnerabilities that also endanger the cloud interfaces of IoT, such as cross‐site scripting (XSS), code injection, and Remote Command/Code Execute (RCE). XSS is one of the most common web application attacks, which allows the attacker to obtain private user information or attack IoT devices and IoT cloud platforms. Most of the existing XSS payload detection models are based on machine learning or deep learning, which usually require a lot of external resources, such as pretrained word vectors, to achieve a better performance on unknown samples. But in the field of XSS payload detection, high‐quality vector representations of samples are often difficult to obtain. In addition, existing models all perform substantially worse when the distribution of XSS payloads and benign samples in the test dataset is extremely unbalanced (e.g., XSS payloads: benign samples = 1: 20). While in the real XSS attack scenario against IoT, an XSS payload is often hidden in a massive amount of normal user requests, indicating that these models are not practical. In response to the above issues, we propose an XSS payload detection model based on inductive graph neural networks, IGXSS (XSS payload detection model based on inductive GCN), to detect XSS payloads targeting IoT. Firstly, we treat the samples and words obtained from segmenting the samples as nodes and attach lines between them in order to form a graph. Then, we obtain the feature matrix of nodes and edges utilizing information between nodes only (instead of external resources such as pretrained word vectors). Finally, we feed the obtained feature matrix into a two‐layer GCN for training and validate the performance of models in several datasets with different sample distributions. Extensive experiments on the real datasets show that IGXSS performs better compared to other models under various sample distributions. In particular, when the sample distribution is extremely unbalanced, the recall and F1 score of IGXSS still reach 1.000 and 0.846, demonstrating that IGXSS is more robust and more suitable for practical scenarios.

Similar Papers
  • Conference Article
  • Citations8

Studying and Analyzing the Fog-based Internet of Robotic Things

  • Nov 28, 2020
  • Noha El Menbawy +3
  • Research Article
  • Citations175

A survey on security in internet of things with a focus on the impact of emerging technologies

  • Jul 05, 2022
  • Internet of Things
  • Phillip Williams +3
  • Conference Article
  • Citations3

Cloud-Assisted Privacy-Preserving Classification for IoT Applications

  • May 01, 2018
  • Lei Yang +1
  • PDF
  • Research Article
  • Citations57

A Deep Learning Approach for IoT Traffic Multi-Classification in a Smart-City Scenario

  • Jan 01, 2022
  • IEEE Access
  • Aroosa Hameed +2
  • Research Article
  • Citations36

Detection of Malicious Activities in Internet of Things Environment Based on Binary Visualization and Machine Intelligence

  • May 10, 2019
  • Wireless Personal Communications
  • Hamad Naeem
  • PDF
  • Research Article
  • Citations14

Promoting Information Privacy Protection Awareness for Internet of Things (IoT)

  • Sep 16, 2022
  • Mobile Information Systems
  • Prominent Mugariri +4
  • Research Article

Internet of things: a cloud-MANET communication framework

  • Feb 09, 2021
  • Computer Science and Information Technologies
  • Tanweer Alam
  • Research Article
  • Citations5

On improving agricultural IoT management process for fault detection

  • Jul 03, 2017
  • Journal of Information and Telecommunication
  • Tien-Dung Nguyen +4
  • Research Article
  • Citations4

The Internet of Geophysical Things: Raspberry Pi Enhanced REF TEK (RaPiER) System Integration and Evaluation

  • Feb 24, 2016
  • Seismological Research Letters
  • Frank Sepulveda +1
  • Research Article
  • Citations5

Exploring lightweight machine learning models for personal internet of things (IOT) device security

  • Nov 30, 2024
  • World Journal of Advanced Research and Reviews
  • Sofiritari Ibikoroma Amgbara +2
  • Research Article

An IoT based remote medical diagnosis system using one time pad cipher over MQTT protocol

  • Nov 26, 2025
  • Scientific Reports
  • N Rajesh Kumar +5
  • Research Article
  • Citations14

Seeing is not always believing: Insights on IoT manufacturing from firmware composition analysis and vendor survey

  • Jul 21, 2023
  • Computers & Security
  • Mitsuaki Akiyama +5
  • Research Article
  • Citations18

IoT forensics: What kind of personal data can be found on discarded, recycled, or re-sold IoT devices

  • May 19, 2022
  • Journal of Discrete Mathematical Sciences and Cryptography
  • S Gowri +3
  • Conference Article
  • Citations11

Efficient Blockchain-based IoT Firmware Update Considering Distribution Incentives

  • Jan 30, 2021
  • Tatsuhiro Fukuda +1
  • Conference Article
  • Citations3

GNSS System Design and Evaluation for IoT Applications

  • Nov 03, 2017
  • Proceedings of the Satellite Division's International Technical Meeting (Online)/Proceedings of the Satellite Division's International Technical Meeting (CD-ROM)
  • Toru Katsumoto +3
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.