AN INTELLIGENT WEB APPLICATION FIREWALL FUZZING FRAMEWORK INTEGRATED WITH BLOCKCHAIN TECHNOLOGY FOR SECURE PAYLOAD ANALYSIS AND TRACEABILITY.

Web Application Firewalls (WAFs) perform as a dangerous security component protecting web applications from various attack vectors. However, their effectiveness against modern evasion techniques remains a significant concern in cybersecurity. This paper presents an intelligent WAF fuzzing framework...

Descripción completa

Detalles Bibliográficos
Publicado en:Scientific Culture Vol. 12; no. 1; pp. 189 - 203
Autores principales: Laila, Dena Abu, Obeidat, Ibrahim Moh’d, Aman, Mohammed, Altubaishe, Bandar Z., Odeh, Mahmoud, Samara, Ghassan
Formato: Artículo
Publicado: University of the Aegean 2026
Materias:
Acceso en línea:Ver este registro en EBSCOhost
fields @attributes:
  recordID: 1
pdfLink:
plink: https://search.ebscohost.com/login.aspx?direct=true&db=hlh&AN=191958877&site=ehost-live
header:
  @attributes:
    shortDbName: hlh
    uiTerm: 191958877
    longDbName: Humanities International Complete
    uiTag: AN
  controlInfo:
    bkinfo:
    jinfo:
      jid:
        24080071
        I6HU
      jtl: Scientific Culture
      issn: 24080071
      maglogo: N
    pubinfo:
      dt: 2026
      vid: 12
      iid: 1
      pid: 47715
      pub: University of the Aegean
    artinfo:
      ui:
        191958877
        10.5281/zenodo.18092759
      ppf: 189
      ppct: 14
      formats:
      tig:
        atl: AN INTELLIGENT WEB APPLICATION FIREWALL FUZZING FRAMEWORK INTEGRATED WITH BLOCKCHAIN TECHNOLOGY FOR SECURE PAYLOAD ANALYSIS AND TRACEABILITY.
      aug:
        au:
          Laila, Dena Abu
          Obeidat, Ibrahim Moh’d
          Aman, Mohammed
          Altubaishe, Bandar Z.
          Odeh, Mahmoud
          Samara, Ghassan
        affil:
          Department of Cybersecurity, Zarqa University, Zarqa Technical Intermediate College, Zarqa, Jordan.
          Department of Information Technology, Faculty of Prince Al-Hussein Bin Abdullah II for Information Technology, The Hashemite University, P.O. Box 330127, Zarqa 13133, Jordan.
          Department of Industrial Engineering, College of Engineering, University of Business and Technology, Jeddah 21448, Saudi Arabia.
          Supply Chain Management Department, University of Business and Technology, Jeddah, Saudi Arabia.
          Department of Cybersecurity, Faculty of Information Technology, Zarqa University, Amman, Jordan.
          Department of Computer Science, Zarqa University, Zarqa, Jordan.
      su:
        Firewalls (Computer security)
        Blockchains
        Machine learning
        Internet security
        SQL
      sug:
        subj:
          Firewalls (Computer security)
          Blockchains
          Machine learning
          Internet security
          SQL
      keyword:
        Blockchain Security
        Consensus Validation
        Fuzzing Framework
        Payload Generation
        Vulnerability Assessment
        Web Application Firewall
      ab: Web Application Firewalls (WAFs) perform as a dangerous security component protecting web applications from various attack vectors. However, their effectiveness against modern evasion techniques remains a significant concern in cybersecurity. This paper presents an intelligent WAF fuzzing framework that incorporate blockchain technology for secure logging, traceability, and comprehensive analysis of payload evasion attempts. Our proposed system employs an adaptive payload gen- eration engine that utilizes machine learning algorithms to create modern attack vectors that target SQL injection, cross-site scripting (XSS), and command injection vulnerabilities. The framework conducts systematic fuzzing attacks against many WAFprotected sites while logging each attempt in an unchangeable blockchain record, ensuring tamper-proof audit trails. Through comprehensive experimental evaluation in 12 commercial and open-source WAF solutions using more than 50,000 generated payloads, our framework demonstrates superior capability to identify previously unknown bypass techniques. The integrated analytics dashboard provides a comparative real-time analysis of WAF effectiveness, allowing security researchers to determine protection gaps and understand emerging attack patterns. The results indicate that our intelligent approach achieves a 34% enhancement in evasion detection compared to conventional fuzzing methods while maintaining complete traceability through blockchain integration. The framework successfully identified 347 novel bypass techniques and achieved consensus validation with 99.8% accuracy across distributed invalidator nodes.
      pubtype: Academic Journal
      doctype: Article
      src: R
    language: English
    refInfo:
    copyright:
      @attributes:
        flag: Y
      dt:
        @attributes:
          year: 2026
    holdings:
      @attributes:
        islocal: N