{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,28]],"date-time":"2026-03-28T01:59:10Z","timestamp":1774663150036,"version":"3.50.1"},"publisher-location":"Singapore","reference-count":26,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819698936","type":"print"},{"value":"9789819698943","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-981-96-9894-3_12","type":"book-chapter","created":{"date-parts":[[2025,7,25]],"date-time":"2025-07-25T19:57:14Z","timestamp":1753473434000},"page":"134-144","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Fully Automated XSS Vulnerability Detection by Reinforcement Learning"],"prefix":"10.1007","author":[{"given":"Yanan","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tingting","family":"Qiao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maode","family":"Ma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,7,26]]},"reference":[{"key":"12_CR1","doi-asserted-by":"crossref","unstructured":"Su, H., et al.: Splendor: static detection of stored XSS in modern web applications. In: Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis, pp. 1043\u20131054. Association for Computing Machinery, New York (2023)","DOI":"10.1145\/3597926.3598116"},{"key":"12_CR2","doi-asserted-by":"crossref","unstructured":"Liu, Z., Fang, Y., Huang, C., Xu, Y.: MFXSS: an effective XSS vulnerability detection method in JavaScript based on multi-feature model. Comput. Secur. 124, 103015 (2023)","DOI":"10.1016\/j.cose.2022.103015"},{"issue":"13","key":"12_CR3","doi-asserted-by":"publisher","first-page":"7895","DOI":"10.3390\/app13137895","volume":"13","author":"X Tan","year":"2023","unstructured":"Tan, X., Xu, Y., Wu, T., Li, B.: Detection of reflected XSS vulnerabilities based on paths-attention method. Appl. Sci. 13(13), 7895 (2023)","journal-title":"Appl. Sci."},{"key":"12_CR4","doi-asserted-by":"crossref","unstructured":"Wang, X., Xu, Y., Sun, Z.: A hybrid dynamic testing technology source code XSS vulnerability detection method. In: 2023 IEEE Smart World Congress (SWC), pp. 1\u20136 (2023)","DOI":"10.1109\/SWC57546.2023.10448993"},{"key":"12_CR5","doi-asserted-by":"crossref","unstructured":"Nunes, P., Fonseca, J., Vieira, M.: Blending static and dynamic analysis for web application vulnerability detection: methodology and case study. IEEE Access, 13, 3139\u20133153 (2025)","DOI":"10.1109\/ACCESS.2024.3522094"},{"key":"12_CR6","series-title":"Reliability, and Security Companion","first-page":"651","volume-title":"2022 IEEE 22nd International Conference on Software Quality","author":"H Guan","year":"2022","unstructured":"Guan, H., Li, D., Li, H., Zhao, M.: A Crawler-Based Vulnerability Detection Method for Cross-Site Scripting Attacks. In: 2022 IEEE 22nd International Conference on Software Quality. Reliability, and Security Companion, pp. 651\u2013655. IEEE, Guangzhou (2022)"},{"key":"12_CR7","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102204","volume":"103","author":"F Caturano","year":"2021","unstructured":"Caturano, F., Perrone, G., Romano, S.P.: Discovering reflected cross-site scripting vulnerabilities using a multi-objective reinforcement learning environment. Comput. Secur. 103, 102204 (2021)","journal-title":"Comput. Secur."},{"key":"12_CR8","doi-asserted-by":"crossref","unstructured":"Hasegawa, K., Hidano, S., Fukushima, K.: Automating XSS vulnerability testing using reinforcement learning. in: 9th International Conference on Information Systems Security and Privacy, pp. 70\u201380 (2023)","DOI":"10.5220\/0011653600003405"},{"key":"12_CR9","series-title":"Security and Privacy in Computing and Communications","first-page":"147","volume-title":"2022 IEEE International Conference on Trust","author":"M Foley","year":"2022","unstructured":"Foley, M., Maffeis, S.: Haxss: Hierarchical Reinforcement Learning for XSS Payload Generation. In: 2022 IEEE International Conference on Trust. Security and Privacy in Computing and Communications, pp. 147\u2013158. IEEE, Wuhan, China (2022)"},{"issue":"4","key":"12_CR10","doi-asserted-by":"publisher","first-page":"2482","DOI":"10.3390\/app13042482","volume":"13","author":"X Song","year":"2023","unstructured":"Song, X., Zhang, R., Dong, Q., Cui, B.: Grey-box fuzzing based on reinforcement learning for XSS vulnerabilities. Appl. Sci. 13(4), 2482 (2023)","journal-title":"Appl. Sci."},{"key":"12_CR11","unstructured":"HAHWUL. Xspear. https:\/\/github.com\/hahwul\/xspear. Accessed 1 Feb 2025"},{"key":"12_CR12","unstructured":"Epsylon. Xsser. https:\/\/github.com\/epsylon\/xsser. Accessed 1 Jan 2025"},{"key":"12_CR13","unstructured":"Wapiti. Wapiti. https:\/\/wapiti.sourceforge.io\/. Accessed 25 Feb 2025"},{"key":"12_CR14","unstructured":"K. Prole. XSSmap. https:\/\/github.com\/secdec\/xssmap. Accessed 25 Feb 2025"},{"key":"12_CR15","unstructured":"A. Riancho. W3af. https:\/\/github.com\/andresriancho\/w3af. Accessed 25 Feb 2025"},{"key":"12_CR16","unstructured":"Mnih, V., et al.: Asynchronous methods for deep reinforcement learning. In: Proceedings of the 33rd International Conference on Machine Learning, pp. 1928\u20131937. JMLR.org, New York (2016)"},{"key":"12_CR17","unstructured":"Google. 2018. Firing Range. https:\/\/github.com\/google\/firing-range. Accessed 25 Feb 2025"},{"key":"12_CR18","unstructured":"OWASP. 2021. OWASP Benchmark. https:\/\/owasp.org\/www-project-benchmark\/. Accessed 25 Feb 2025"},{"key":"12_CR19","unstructured":"Webseclab. https:\/\/github.com\/yahoo\/webseclab. Accessed 25 Feb 2025"},{"key":"12_CR20","unstructured":"Doup\u00e9, A., Cavedon, L., Kruegel, C., Vigna, G.: Enemy of the state: a state-aware black-box web vulnerability scanner. In: 21st USENIX Conference on Security Symposium (Security 2012), p. 26. USENIX Association, USA (2012)"},{"key":"12_CR21","unstructured":"Safedog. https:\/\/www.safedog.cn\/website_safedog.html. Accessed 25 Feb 2025"},{"key":"12_CR22","unstructured":"Modsecurity. https:\/\/github.com\/SpiderLabs\/ModSecurity. Accessed 25 Feb 2025"},{"key":"12_CR23","unstructured":"Burp Suite. Burp. https:\/\/portswigger.net\/burp. Accessed 25 Feb 2025"},{"key":"12_CR24","doi-asserted-by":"crossref","unstructured":"Eriksson, B., Pellegrino, G., Sabelfeld, A.:Black widow: blackbox data-driven web scanning. In: IEEE Symposium on Security and Privacy (SP), pp. 1125\u20131142. San Francisco (2021)","DOI":"10.1109\/SP40001.2021.00022"},{"key":"12_CR25","unstructured":"OWASP WebGoat | OWASP Foundation. https:\/\/owasp.org\/www-project-webgoat\/. Accessed 25 Feb 2025"},{"key":"12_CR26","unstructured":"XSS-Challenge. c0ny1\/xss-challenge-tour. Accessed 25 Feb 2025"}],"container-title":["Lecture Notes in Computer Science","Advanced Intelligent Computing Technology and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-96-9894-3_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,28]],"date-time":"2026-03-28T01:35:38Z","timestamp":1774661738000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-96-9894-3_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9789819698936","9789819698943"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/978-981-96-9894-3_12","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"26 July 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Disclosure of Interests"}},{"value":"ICIC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Intelligent Computing","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Ningbo","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 July 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 July 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icic2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.ic-icc.cn\/icg\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}