STATIK TAHLILDAN TASHQARI: VEB-ILOVA XAVFSIZLIK ZAIF JIHATLARINI ANIQLASH UCHUN AI TEXNIKALARI
Kalit so‘zlar:
sun'iy intellekt, veb-xavfsizlik, zaifliklarni aniqlash, mashinani o'rganish, chuqur o'rganish, statik tahlil, dinamik tahlil, anomaliyalarni aniqlash, xavfsiz veb-ilovalar, kiberxavfsizlikni avtomatlashtirish.Abstrak
Zamonaviy veb-ilovalarning tobora murakkablashib borishi an'anaviy statik tahlil vositalarida jiddiy cheklovlarni ochib berdi, ular ko'pincha dinamik, kontekstga bog'liq yoki chalkashtirilgan xavfsizlik zaifliklarini aniqlay olmaydi. Sun'iy intellekt (AI) sohasidagi so'nggi yutuqlar avtomatlashtirilgan xavfsizlikni baholashni takomillashtirish uchun istiqbolli yangi yo'nalishlarni taqdim etadi. Ushbu tadqiqot veb-ilovalarning statik tahlildan tashqari zaifliklarini aniqlash uchun mashina o'rganishga asoslangan va chuqur o'rganishga asoslangan yondashuvlarni o'rganadi. Biz AI asosidagi anomaliyalarni aniqlash, dinamik xulq-atvor modellashtirish, semantik kodni tushunish va SQL in'ektsiyasi, XSS, autentifikatsiyani chetlab o'tish va mantiqiy zaifliklarni aniqlashga qodir gibrid aqlli skanerlash usullarini o'rganamiz. Taklif etilayotgan tizim aniqlash aniqligini oshirish va noto'g'ri ijobiy natijalarni kamaytirish uchun statik xususiyatlarni ish vaqtidagi xulq-atvor signallari bilan birlashtiradi. Topilmalar shuni ko'rsatadiki, AI yordamida usullar murakkab hujum naqshlari va nol kunlik ko'rsatkichlarni aniqlashda an'anaviy skanerlardan ustun turadi, bu esa aqlli veb-xavfsizlikni baholashda sezilarli yutuqni anglatadi.
References
M. Sharif et al., “A Survey of Machine Learning Techniques for Web Security,” Journal of Network and Computer Applications, vol. 168, 2020.
Y. Li et al., “VulDeePecker: A Deep Learning-Based Vulnerability Detection System,” NDSS Symposium, 2018.
S. Krishnan et al., “Deep Learning for Code Analysis: A Survey,” ACM Computing Surveys, vol. 55, no. 1, 2022.
OWASP Foundation, “OWASP Top 10: Web Application Security Risks,” 2021.
Available: https://owasp.org
J. Lin, Z. Su, and C. Zhang, “Graph Neural Networks in Software Engineering,” IEEE Transactions on Software Engineering, 2021.
C. Kolosnjaji et al., “Deep Learning-Based Detection of Malicious HTTP Traffic,” IEEE TrustCom, 2016.
S. Hochreiter and J. Schmidhuber, “Long Short-Term Memory,” Neural Computation, 1997.
K. A. Nguyen and Y. Kim, “Hybrid Static–Dynamic Analysis for Detecting Logic Vulnerabilities in Web Applications,” IEEE Security & Privacy Workshops, 2020.
Nashr qilingan
Nashr
Bo'lim
License
Copyright (c) 2025 S.Sh. Kobilov, A.I. Goyibnazarov, Q.T.Umurzoqov
This work is licensed under a Creative Commons Attribution 4.0 International License.
(+998)90 142-39-38
Andijon viloyati, Marhamat tumani, Qashqar ko’chasi 189-uy