{"id":"W2920590155","doi":"10.1145/3297067.3297096","title":"Detecting Blind Cross-Site Scripting Attacks Using Machine Learning","year":2018,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":24,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University of Edmonton","funders":"Ministère de l'Économie, de la Science et de l'Innovation - Québec","keywords":"Cross-site scripting; Computer science; Scripting language; Web application; Computer security; World Wide Web; Web server; Server; Web page; Web application security; Operating system; The Internet; Web development","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0009752609,0.0001573019,0.0001512985,0.0001343626,0.0008442799,0.0007688163,0.0006433882,0.00007339115,0.0001392277],"category_scores_gemma":[0.0002776325,0.0001546634,0.00005679251,0.0005334974,0.0001592057,0.0008664678,0.0005636796,0.0003142867,0.0002720441],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00007163892,"about_ca_system_score_gemma":0.00004935742,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0004464539,"about_ca_topic_score_gemma":0.0001361997,"domain_scores_codex":[0.9983363,0.0001027685,0.000340719,0.0005339617,0.0002955307,0.0003907227],"domain_scores_gemma":[0.9987418,0.0001677787,0.0001522993,0.0005575367,0.0002833043,0.00009728146],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00007239417,0.0001749599,0.4470828,0.0001373585,0.00008438557,0.00001579167,0.03099178,0.004117008,0.3597708,0.07631066,0.0001747091,0.08106738],"study_design_scores_gemma":[0.0004085732,0.00005748176,0.00124507,0.00001547115,0.000003096065,0.00003702347,0.0001167735,0.9282128,0.0609547,0.001008554,0.007671389,0.0002690738],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5745255,0.00003441155,0.4213073,0.00008739816,0.0001475288,0.00008480986,4.651513e-7,0.0003669923,0.003445602],"genre_scores_gemma":[0.857047,6.827982e-7,0.1416446,0.0002666273,0.0002783144,0.000005644048,9.716092e-7,0.00001490174,0.0007411888],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.9240958,"threshold_uncertainty_score":0.7413713,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.05213637726759891,"score_gpt":0.3356718794094752,"score_spread":0.2835355021418763,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}