MBDS: model-based detection system for cross site scripting

Cross site scripting (XSS) is a vulnerability that is essentially caused by the failure of checking up on user input before returning it to the client's web browsers. Using proxy servers as application-level firewalls to filter out the malicious code on the server side is a common mechanism in most of the server side proposals. But it is a passive way to detect XSS and will reduce the performance of server dramatically. This paper proposes a client-side system that automatically detects XSS vulnerability by manipulating either of two modes. Through the modified model the system has concluded that the input invalidation is the most important one in eight main reasons which causes XXS. The system also shares the vulnerability information via a central database.