Intelligent Systems for XSS attack detection: A brief survey

Nowadays, the use of web applications is an important need for users, more than a third of critical risks found in web applications can be attributed to injections. According to OWASP, XSS is an injection attack in which an attacker inserts a malicious script within the browser's victim in order to exercise significant activities. To resist this attack, various techniques have been designed and deployed, unfortunately, these techniques remain insufficient to perfectly protect web applications particularly, those which are based on classical tools. In this survey, we highlight the principle of XSS attack and different XSS categories, we discuss existing mechanisms especially based on intelligent systems to figure out what is done and how the XSS attack detection problem is handled. In addition, we make a comparative study of some existing approaches and we discuss their issues.