Iranian Society of Cryptology The ISC International Journal of Information Security 2008-2045 18 3 2026 07 01 Genetic Algorithms in Action: Adversarial Attacks on Machine Learning-Based XSS Detection Systems 277 286 248360 10.22042/isecure.2026.248360 EN Mohammadreza Safi Faculty of Electrical and Computer Engineering, Malek Ashtar University of Technology, Iran Mohammad Ali Hadavi Faculty of Electrical and Computer Engineering, Malek Ashtar University of Technology, Iran Journal Article Cross-Site Scripting (XSS) remains a critical web application vulnerability, consistently ranking among the OWASP Top 10 security risks. Although machine learning and deep learning techniques have improved XSS detection, these models are susceptible to adversarial attacks — carefully crafted inputs designed to evade detection. This paper proposes a novel adversarial attack framework that leverages a Genetic Algorithm to generate adversarial XSS payloads targeting machine learning-based detection systems automatically. Our framework is designed to achieve high transferability, enabling adversarial samples to bypass a wide range of detection models, even those with different architectures. By employing genetic operators such as selection, crossover, and mutation, the framework systematically optimizes payloads to maximize their ability to evade detection while preserving syntactic validity. Experimental results demonstrate that the generated adversarial samples consistently evade multiple state-of-the-art detection models, revealing significant vulnerabilities in current XSS defences. This work underscores the urgent need for more robust machine learning-based security solutions and provides a foundation for developing improved defences against adaptive adversarial threats. https://www.isecure-journal.com/article_248360_dbfa5440c1b25025783d77cfde98f97e.pdf