Abstract:Web3.0, as the link between the physical and digital domains, faces increasing security threats due to its inherent complexity and openness. Traditional intrusion detection systems (IDSs) encounter formidable challenges in grappling with the multidimensional and nonlinear traffic data characteristic of the Web3.0 environment. Such challenges include insufficient samples of attack data, inadequate feature extraction, and resultant inaccuracies in model classification. Moreover, the scarcity of certain traffic data available for analysis by IDSs impedes the system's capacity to document instances of malicious behavior. In response to these exigencies, this paper presents a novel approach to Web3.0 intrusion detection, predicated on the utilization of cycle-consistent generative adversarial networks (CycleGANs). Leveraging the data transformation capabilities of its generator, this method facilitates bidirectional conversion between normal Web3.0 behavioral data and potentially intrusive behavioral data. This transformative process not only augments the diversity and volume of recorded intrusive behaviors but also clandestinely simulates various attack scenarios. Furthermore, through fostering mutual competition and learning between the discriminator and generator, the approach enhances the ability to discern the defining characteristics of potential intrusive behaviors, thereby bolstering the accuracy of intrusion detection. To substantiate the efficacy of the CycleGAN-based intrusion detection method, simulation experiments were conducted utilizing public datasets, including KDD CUP 1999 (KDD), CIC-DDOS2019, CIC-IDS2018, and SR-BH 2020. The experimental findings evince the method's remarkable accuracies across the four datasets, attaining rates of 99.81%, 97.79%, 89.25%, and 95.15%, respectively, while concurrently maintaining low false-positive rates. This research contributes novel insights and methodologies toward the advancement of Web3.0 intrusion detection through the application of CycleGAN technology, which is poised to play a pivotal role in fortifying the security landscape of Web3.0.

In-Application Defense Against Evasive Web Scans through Behavioral Analysis

SENet: Visual Detection of Online Social Engineering Attack Campaigns

WebPatrol: automated collection and replay of web-based malware scenarios.

BlackWatch: Increasing Attack Awareness within Web Applications

Group Testing Based Detection of Web Service DDoS Attackers.

Anteater: Advanced Persistent Threat Detection With Program Network Traffic Behavior

EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Automatically Detecting Online Deceptive Patterns in Real-time

An Evasion and Counter-Evasion Study in Malicious Websites Detection

Early Detection of In-Memory Malicious Activity based on Run-time Environmental Features

Malicious web script-based cyber attack protection technology

Using Google Analytics to Support Cybersecurity Forensics

A Practical Website Fingerprinting Defense Approach with Universal Adversarial Perturbations.

Web application scanning for malware attack detection with provide appropriate incident report by using hybrid method

Crook-sourced intrusion detection as a service

Efficient and Low Overhead Website Fingerprinting Attacks and Defenses based on TCP/IP Traffic

Deep Learning Technique-Enabled Web Application Firewall for the Detection of Web Attacks

ProPatrol: Attack Investigation via Extracted High-Level Tasks

Website Detection Using Remote Traffic Analysis

Reinventing Web Security: An Enhanced Cycle-Consistent Generative Adversarial Network Approach to Intrusion Detection

Ransomware Attacks in Cyber-Physical Systems: Countermeasure of Attack Vectors Through Automated Web Defenses