WEB-ILOVALARDA UCHRAYDIGAN XAVFLARNI (SQL INJECTION, XSS) ANIQLASH VA OLDINI OLISHNING AVTOMATLASHTIRILGAN USULLARI
Main Article Content
Abstract
Ushbu maqolada web-ilovalarda eng ko‘p uchraydigan ikki turdagi zaiflik — SQL Injection (SQL in’ektsiyasi) va Cross-Site Scripting (XSS) hujumlarining tabiati, ularni aniqlashning an'anaviy va zamonaviy avtomatlashtirilgan (jumladan, mashinali o‘rganish va chuqur o‘rganishga asoslangan) usullari, shuningdek amaliyotda qo‘llaniladigan oldini olish mexanizmlari tahlil qilingan. Maqolada statik va dinamik xavfsizlik testlash vositalari (SAST/DAST), signaturaga asoslangan va anomaliyaga asoslangan tizimlar, neyron tarmoqlar (LSTM, CNN, BERT asosidagi modellar) yordamida aniqlash yondashuvlari qiyosiy tarzda ko‘rib chiqilgan.
Downloads
Article Details
Section

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
How to Cite
References
OWASP Foundation. OWASP Top 10 – 2021: The Ten Most Critical Web Application Security Risks. — https://owasp.org/Top10/
Veb dasturlashda xavfsizlik masalalari va himoyalanish usullari // Zenodo, 2025. DOI: 10.5281/zenodo.15623537
Web ilova zaifliklarini aniqlash // "Pedagog" respublika ilmiy jurnali, 6-tom, 2-son, 2023-yil, 15-fevral. https://bestpublication.org/index.php/pedg/article/view/3786
Paul A., Sharma V., Olukoya O. SQL injection attack: Detection, prioritization & prevention // Journal of Information Security and Applications, 85 (2024), 103871.
Odeh A., Taleb A.A. XSSer: hybrid deep learning for enhanced cross-site scripting detection // Bulletin of Electrical Engineering and Informatics, 13(5), 2024, 3317–3325.
Nair S.S. Securing against advanced cyber threats: a comprehensive guide to phishing, XSS, and SQL injection defense // Journal of Computer Science and Technology Studies, 6(1), 2024, 76–93.
DarkMap: SQL in'ektsiya kamchiliklarini aniqlash va ulardan foydalanishni avtomatlashtiruvchi ochiq manbali vosita (sqlmap tavsifi). — https://github.com/Darkfile-beka/DarkMap