An Analysis of Key Tools for Detecting Cross-Site Scripting Attacks on Web-Based Systems
摘要
During the previous few years, there has been an escalating number of cyberattacks against web-based systems, that adversely resulted in significant data breaches, losses and reputational damages for businesses. Among these cyberattacks, cross-site scripting attacks, also known as XSS attacks, gained significant attention, which makes is imperative to explore detection methods. Taking cognizance of this issue, this paper reviews and analyses key XSS attack detection tools. To accomplish this objective, the study meticulously examines six distinct tools, notably, web application firewalls, intrusion detection systems, dedicated AI-driven tools, SIEM Systems, honeypots and browser extensions, and provides critical insights on their effectiveness. From our key findings, web application firewalls, AI-driven tools and browser extensions emerged as crucial components for detecting different kinds of XSS attacks, showcasing notable effectiveness. However, it is important to note that the efficacy of these tools may vary depending on factors such as application configurations and update frequency, among others.