XSS Armor: Constructing XSS Defensive Framework for Preserving Big Data Privacy in Internet-of-Things (IoT) Networks

Big data characterizes superfluity of voluminous data that may be in unstructured, structured and/or semi-structured format. Internet of Things networks emerged as one of the biggest sources of big data, stored at the cloud servers. Thereby, it inflates the threats of security attacks such as cross-site scripting (XSS) for stealing the sensitive information and violates the user’s privacy. It leverages an adversary to intervene into user’s individual space. Thus, in this paper, we propose an XSS defensive framework, named as Big IoT Data XSS Armor, to protect user’s privacy in IoT networks. It is a server-side framework that mitigates nonpersistent and persistent XSS attack. Former attack is detected by measuring the similarities in request and response URL with the XSS attack strings. To identify persistent XSS attack, the proposed framework operates by unveiling the irregularities between the genuine features and generated features. The experimental outcomes yield that this framework performs efficiently in shielding against XSS attack and surpasses the detection rate of other existing XSS thwarting techniques because it attains an accuracy of 98.9% and F-measure of 98.4%.