An Analytical Scanning Technique to Detect and Prevent the Transformed SQL Injection and XSS Attacks

Mohammad Qbea’h, Saed Alrabaee, Djedjiga Mouheb

2020

Abstract

Among the most critical and dangerous attacks is the one that exploits Base64 or Hex encoding technique in SQL Injection (SQLIA) and Cross Site Scripting (XSS) attacks, instead of using plain text. This technique is widely used in most dangerous attacks because it evades detection. Therefore, it is possible to bypass many filters such as IDS, without taking into account the transformation methodologies of the symbols and characters. Moreover, it reserves the same semantics with different syntax. Attackers can exploit this serious technique to reach unseen data and gain valuable benefits. To the best of our knowledge, this paper presents the first technique that focuses on detecting and preventing transformed SQLIA and XSS from Base64 and Hex encoding. We perform scanning and analyzing methods by targeting two places: (i) Input boxes and (ii) Strings in page URLs. Then, we decode the inputs and compare them with our stored suspicious tokens. Finally, we perform string matching and mutation mechanisms to revoke the activity of malicious inputs. We have evaluated our technique and the results showed that it is capable to detect and prevent this transformed attack.

Paper Citation

in Harvard Style

Qbea’h M., Alrabaee S. and Mouheb D. (2020). An Analytical Scanning Technique to Detect and Prevent the Transformed SQL Injection and XSS Attacks. In Proceedings of the 6th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-399-5, pages 603-610. DOI: 10.5220/0009004006030610

in Bibtex Style

@conference{icissp20,
author={Mohammad Qbea’h and Saed Alrabaee and Djedjiga Mouheb},
title={An Analytical Scanning Technique to Detect and Prevent the Transformed SQL Injection and XSS Attacks},
booktitle={Proceedings of the 6th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2020},
pages={603-610},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0009004006030610},
isbn={978-989-758-399-5},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 6th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - An Analytical Scanning Technique to Detect and Prevent the Transformed SQL Injection and XSS Attacks
SN - 978-989-758-399-5
AU - Qbea’h M.
AU - Alrabaee S.
AU - Mouheb D.
PY - 2020
SP - 603
EP - 610
DO - 10.5220/0009004006030610