The ISC International Journal of Information Security

Abstract Cross-Site Scripting (XSS) remains a critical web application vulnerability, consistently ranking among the OWASP Top 10 security risks. Although machine learning and deep learning techniques have improved XSS detection, these models are susceptible to adversarial attacks — carefully crafted inputs designed to evade detection. This paper proposes a novel adversarial attack framework that leverages a Genetic Algorithm to generate adversarial XSS payloads targeting machine learning-based detection systems automatically. Our framework is designed to achieve high transferability, enabling adversarial samples to bypass a wide range of detection models, even those with different architectures. By employing genetic operators such as selection, crossover, and mutation, the framework systematically optimizes payloads to maximize their ability to evade detection while preserving syntactic validity. Experimental results demonstrate that the generated adversarial samples consistently evade multiple state-of-the-art detection models, revealing significant vulnerabilities in current XSS defences. This work underscores the urgent need for more robust machine learning-based security solutions and provides a foundation for developing improved defences against adaptive adversarial threats.

Abstract Image watermarking refers to the process of embedding an authentication message, called watermark, into the host image to uniquely identify the ownership. In this paper a novel, intelligent, scalable, robust wavelet-based watermarking approach is proposed. The proposed approach employs a genetic algorithm to find nearly optimal positions to insert watermark. The embedding positions coded as chromosomes and GA operators (e.g. selection, crossover, mutation and elitism), are used to find the nearly optimal embedding positions. A fitness function, which includes both factors related to transparency and robustness, is used to assess and compare chromosomes. The watermarked test images do not show any perceptual degradation. This approach supports scalable watermark detection and provides robustness against progressive wavelet image compression. The experimental results very efficiently prove the robustness of the approach against progressive wavelet image coding even at very low bit-rates and some other attacks. This approach is a good candidate for providing efficient authentication for secure and progressive image transmission applications especially over heterogeneous networks, such as the Internet.