Skip to main content

An Efficient Machine Learning-Based Web Application Firewall with Deep Automated Pattern Categorization

  • Conference paper
  • First Online:
Future Data and Security Engineering. Big Data, Security and Privacy, Smart City and Industry 4.0 Applications (FDSE 2023)

Abstract

Web application firewalls (WAFs) are frequently utilized since they are simple services and offer considerable defense against various cyber attacks. However, based on rules and signatures, traditional WAFs have significant false positive rates (34%.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 84.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 109.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Notes

  1. 1.

    Available at https://www.isi.csic.es/dataset/.

  2. 2.

    Available at https://www.kaggle.com/datasets/antonyj453/urldataset.

  3. 3.

    Available at https://www.kaggle.com/datasets/simiotic/github-code-snippets.

  4. 4.

    Available at https://github.com/yoeo/guesslang.

References

  1. Shaheed, A., Kurdy, M.-B.: Web application firewall using machine learning and features engineering. Secur. Commun. Netw. 2022 (2022). https://doi.org/10.1155/2022/5280158

  2. Jemal, I., Haddar, M.A., Cheikhrouhou, O., Mahfoudhi, A.: SWAF: a smart web application firewall based on convolutional neural network, pp. 01–06 (2022). https://doi.org/10.1109/SIN56466.2022.9970545

  3. Dawadi, B., Adhikari, B., Srivastava, D.: Deep learning technique-enabled web application firewall for the detection of web attacks. Sensors 23 (2023). https://doi.org/10.3390/s23042073

  4. Toprak, S., Yavuz, A.: Web application firewall based on anomaly detection using deep learning. Acta Infologica (2022). https://doi.org/10.26650/acin.1039042

  5. Gogoi, B., Ahmed, T., Saikia, H.: Detection of XSS attacks in web applications: a machine learning approach. Int. J. Innov. Res. Comput. Sci. Technol. 9, 1–10 (2021). https://doi.org/10.21276/ijircst.2021.9.1.1

    Article  Google Scholar 

  6. Devi, T.A.M., Kumar, B.A.: Machine learning with logistic regression for web application firewall. Int. J. Eng. Res. Technol. (IJERT) ICCIDT - 2022 10 (2022). https://doi.org/10.17577/IJERTCONV10IS04059. ISSN 2278-0181

  7. Nguyen, M., Truong, P., Hoang, T.: A new approach to improving web application firewall performance based on support vector machine method with analysis of http request. J. Sci. Technol. Inf. Secur. 1, 62–73 (2022). https://doi.org/10.54654/isj.v1i15.842

  8. Tran, N.-T., Nguyen, V.-H., Nguyen-Le, T., Nguyen-An, K.: Improving modsecurity WAF with machine learning methods. In: Dang, T.K., Küng, J., Takizawa, M., Chung, T.M. (eds.) FDSE 2020. CCIS, vol. 1306, pp. 93–107. Springer, Singapore (2020). https://doi.org/10.1007/978-981-33-4370-2_7

    Chapter  Google Scholar 

  9. Alshammari, A., Aldribi, A.: Apply machine learning techniques to detect malicious network traffic in cloud computing. J. Big Data 8 (2021). https://doi.org/10.1186/s40537-021-00475-1

  10. Nguyen, T.-C.-H., Le-Nguyen, M.-K., Le, D.-T., Nguyen, V.-H., Tôn, L.-P., Nguyen-An, K.: Improving web application firewalls with automatic language detection. SN Comput. Sci. 3(6), 446 (2022). https://doi.org/10.1007/s42979-022-01327-2

    Article  Google Scholar 

Download references

Acknowledgment

We acknowledge Ho Chi Minh City University of Technology (HCMUT), VNU-HCM, for supporting this study.

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Khuong Nguyen-An .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2023 The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Trinh, CV., Le, TT., Le-Nguyen, MK., Le, DT., Nguyen, VH., Nguyen-An, K. (2023). An Efficient Machine Learning-Based Web Application Firewall with Deep Automated Pattern Categorization. In: Dang, T.K., Küng, J., Chung, T.M. (eds) Future Data and Security Engineering. Big Data, Security and Privacy, Smart City and Industry 4.0 Applications. FDSE 2023. Communications in Computer and Information Science, vol 1925. Springer, Singapore. https://doi.org/10.1007/978-981-99-8296-7_15

Download citation

  • DOI: https://doi.org/10.1007/978-981-99-8296-7_15

  • Published:

  • Publisher Name: Springer, Singapore

  • Print ISBN: 978-981-99-8295-0

  • Online ISBN: 978-981-99-8296-7

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics