82 A Behavior-Based Cross-Site Scripting Detection Technique

The main purpose of incross-site scripting (XSS) is to steal the user's sensitive information, as its behavior is to send user's sensitive information to a third party without the user's authorization. To protect the security of web users' information effectively, this paper emphasizes to discuss the theory and flow for attacking XSS with dynamic code obfuscation (DCO) technology, and proposes a behavior-based XSS detection technique. The results of our experiment have demonstrated that the behavior-based XSS detection technique proposed in this paper is feasible in practice.