AN INTELLIGENT WEB APPLICATION FIREWALL FUZZING FRAMEWORK INTEGRATED WITH BLOCKCHAIN TECHNOLOGY FOR SECURE PAYLOAD ANALYSIS AND TRACEABILITY

Web Application Firewalls (WAFs) perform as a dangerous security component protecting web applications from various attack vectors. However, their effectiveness against modern evasion techniques remains a significant concern in cybersecurity. This paper presents an intelligent WAF fuzzing framework that incorporate blockchain technology for secure logging, traceability, and comprehensive analysis of payload evasion attempts. Our proposed system employs an adaptive payload gen- eration engine that utilizes machine learning algorithms to create modern attack vectors that target SQL injection, cross-site scripting (XSS), and command injection vulnerabilities. The framework conducts systematic fuzzing attacks against many WAF-protected sites while logging each attempt in an unchangeable blockchain record, ensuring tamper-proof audit trails. Through comprehensive experimental evaluation in 12 commercial and open-source WAF solutions using more than 50,000 generated payloads, our framework demonstrates superior capability to identify previously unknown bypass techniques. The integrated analytics dashboard provides a comparative real-time analysis of WAF effectiveness, allowing security researchers to determine protection gaps and understand emerging attack patterns. The results indicate that our intelligent approach achieves a 34% enhancement in evasion detection compared to conventional fuzzing methods while maintaining complete traceability through blockchain integration. The framework successfully identified 347 novel bypass techniques and achieved consensus validation with 99.8% accuracy across distributed invalidator nodes.

Authors

Institutions

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2025-12-30
DOI
https://doi.org/10.5281/zenodo.18092758
Primary Topic
Web Application Security Vulnerabilities
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

AN INTELLIGENT WEB APPLICATION FIREWALL FUZZING FRAMEWORK INTEGRATED WITH BLOCKCHAIN TECHNOLOGY FOR SECURE PAYLOAD ANALYSIS AND TRACEABILITY

Bandar Altubaishe, Ghassan Samara, Mohammed Aman, Ibrahim Moh'd Obeidat et al.
Zenodo (CERN European Organization for Nuclear Research)
Web Application Security Vulnerabilities
article

AN INTELLIGENT WEB APPLICATION FIREWALL FUZZING FRAMEWORK INTEGRATED WITH BLOCKCHAIN TECHNOLOGY FOR SECURE PAYLOAD ANALYSIS AND TRACEABILITY

Bandar Altubaishe, Ghassan Samara, Mohammed Aman, Ibrahim Moh'd Obeidat, Mahmoud Odeh, Dena Abu Laila
article en

Abstract

Web Application Firewalls (WAFs) perform as a dangerous security component protecting web applications from various attack vectors. However, their effectiveness against modern evasion techniques remains a significant concern in cybersecurity. This paper presents an intelligent WAF fuzzing framework that incorporate blockchain technology for secure logging, traceability, and comprehensive analysis of payload evasion attempts. Our proposed system employs an adaptive payload gen- eration engine that utilizes machine learning algorithms to create modern attack vectors that target SQL injection, cross-site scripting (XSS), and command injection vulnerabilities. The framework conducts systematic fuzzing attacks against many WAF-protected sites while logging each attempt in an unchangeable blockchain record, ensuring tamper-proof audit trails. Through comprehensive experimental evaluation in 12 commercial and open-source WAF solutions using more than 50,000 generated payloads, our framework demonstrates superior capability to identify previously unknown bypass techniques. The integrated analytics dashboard provides a comparative real-time analysis of WAF effectiveness, allowing security researchers to determine protection gaps and understand emerging attack patterns. The results indicate that our intelligent approach achieves a 34% enhancement in evasion detection compared to conventional fuzzing methods while maintaining complete traceability through blockchain integration. The framework successfully identified 347 novel bypass techniques and achieved consensus validation with 99.8% accuracy across distributed invalidator nodes.

Zenodo (CERN European Organization for Nuclear Research)
Zarqa University (JO), Hashemite University (JO), Dalian University of Technology (CN), University for Business and Technology (XK)
Peace, Justice and strong institutions
Openalex Percentile: Top 22%
Web Application Security Vulnerabilities
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.