{"id":"https://openalex.org/W4312992238","doi":"https://doi.org/10.1007/978-981-19-8285-9_7","title":"CMPD: Context-Based Malicious Parameter Detection for APIs","display_name":"CMPD: Context-Based Malicious Parameter Detection for APIs","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4312992238","doi":"https://doi.org/10.1007/978-981-19-8285-9_7"},"language":"en","primary_location":{"id":"doi:10.1007/978-981-19-8285-9_7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-981-19-8285-9_7","pdf_url":null,"source":{"id":"https://openalex.org/S2764900261","display_name":"Communications in computer and information science","issn_l":"1865-0929","issn":["1865-0929","1865-0937"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Communications in Computer and Information Science","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1007/978-981-19-8285-9_7","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033936990","display_name":"Zhangjie Zhao","orcid":null},"institutions":[{"id":"https://openalex.org/I4210096250","display_name":"Beijing Institute of Big Data Research","ror":"https://ror.org/00s1sz824","country_code":"CN","type":"facility","lineage":["https://openalex.org/I20231570","https://openalex.org/I37796252","https://openalex.org/I4210096250"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhangjie Zhao","raw_affiliation_strings":["Beijing Big Data Centre, Beijing, 100101, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Big Data Centre, Beijing, 100101, China","institution_ids":["https://openalex.org/I4210096250"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100351955","display_name":"Lin Zhang","orcid":"https://orcid.org/0000-0003-3985-1374"},"institutions":[{"id":"https://openalex.org/I4210096250","display_name":"Beijing Institute of Big Data Research","ror":"https://ror.org/00s1sz824","country_code":"CN","type":"facility","lineage":["https://openalex.org/I20231570","https://openalex.org/I37796252","https://openalex.org/I4210096250"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lin Zhang","raw_affiliation_strings":["Beijing Big Data Centre, Beijing, 100101, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Big Data Centre, Beijing, 100101, China","institution_ids":["https://openalex.org/I4210096250"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100399166","display_name":"Xing Zhang","orcid":"https://orcid.org/0009-0007-5706-256X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xing Zhang","raw_affiliation_strings":["National Engineering Laboratory for Big Data Collaborative Security Technology, Beijing, 102209, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Laboratory for Big Data Collaborative Security Technology, Beijing, 102209, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100347016","display_name":"Ying Wang","orcid":"https://orcid.org/0000-0001-8645-4326"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ying Wang","raw_affiliation_strings":["National Engineering Laboratory for Big Data Collaborative Security Technology, Beijing, 102209, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Laboratory for Big Data Collaborative Security Technology, Beijing, 102209, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5116130579","display_name":"Yi Qin","orcid":"https://orcid.org/0000-0002-5957-9323"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yi Qin","raw_affiliation_strings":["National Engineering Laboratory for Big Data Collaborative Security Technology, Beijing, 102209, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Laboratory for Big Data Collaborative Security Technology, Beijing, 102209, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"99","last_page":"112"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7525757551193237},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5608803629875183},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.5442583560943604},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.4990510940551758},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.495230108499527},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.47544169425964355},{"id":"https://openalex.org/keywords/sql-injection","display_name":"SQL injection","score":0.4280979633331299},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.42683807015419006},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.38654521107673645},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3456428050994873},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.21089449524879456},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.16271457076072693},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.16080787777900696},{"id":"https://openalex.org/keywords/search-engine","display_name":"Search engine","score":0.14091676473617554},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.12505140900611877}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7525757551193237},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5608803629875183},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.5442583560943604},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.4990510940551758},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.495230108499527},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.47544169425964355},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.4280979633331299},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.42683807015419006},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.38654521107673645},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3456428050994873},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.21089449524879456},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.16271457076072693},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.16080787777900696},{"id":"https://openalex.org/C97854310","wikidata":"https://www.wikidata.org/wiki/Q19541","display_name":"Search engine","level":2,"score":0.14091676473617554},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.12505140900611877},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.0},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.0},{"id":"https://openalex.org/C194222762","wikidata":"https://www.wikidata.org/wiki/Q114486","display_name":"Query by Example","level":4,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C164120249","wikidata":"https://www.wikidata.org/wiki/Q995982","display_name":"Web search query","level":3,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/978-981-19-8285-9_7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-981-19-8285-9_7","pdf_url":null,"source":{"id":"https://openalex.org/S2764900261","display_name":"Communications in computer and information science","issn_l":"1865-0929","issn":["1865-0929","1865-0937"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Communications in Computer and Information Science","raw_type":"book-chapter"}],"best_oa_location":{"id":"doi:10.1007/978-981-19-8285-9_7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-981-19-8285-9_7","pdf_url":null,"source":{"id":"https://openalex.org/S2764900261","display_name":"Communications in computer and information science","issn_l":"1865-0929","issn":["1865-0929","1865-0937"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Communications in Computer and Information Science","raw_type":"book-chapter"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W157193387","https://openalex.org/W1560130852","https://openalex.org/W1601009504","https://openalex.org/W2146729596","https://openalex.org/W2572884539","https://openalex.org/W2575458798","https://openalex.org/W2793043914","https://openalex.org/W2793171130","https://openalex.org/W2797283471","https://openalex.org/W2807024897","https://openalex.org/W2901654758","https://openalex.org/W2903893305","https://openalex.org/W2915009417","https://openalex.org/W3047848029","https://openalex.org/W6601883942"],"related_works":["https://openalex.org/W4312406950","https://openalex.org/W3188339517","https://openalex.org/W2611747598","https://openalex.org/W2549898710","https://openalex.org/W2166381878","https://openalex.org/W2955734438","https://openalex.org/W2504194819","https://openalex.org/W3132720240","https://openalex.org/W4256450364","https://openalex.org/W3069109132"],"abstract_inverted_index":{"Abstract":[0],"The":[1,32],"Application":[2],"Program":[3],"Interface":[4],"(API)":[5],"plays":[6],"an":[7],"important":[8],"role":[9],"as":[10],"the":[11,19,49,65,70,84,99,103,117,130,145,148,162,167],"channel":[12],"for":[13,59,134],"data":[14,75,221],"interaction":[15],"between":[16],"programs,":[17],"while":[18],"widespread":[20],"use":[21,137,156],"of":[22,51,55,102,147],"APIs":[23],"has":[24],"brought":[25],"security":[26],"risks":[27],"that":[28,174],"cannot":[29],"be":[30],"ignored.":[31],"adversary":[33],"can":[34,205,227],"perform":[35],"various":[36],"Web":[37],"attacks,":[38],"including":[39,179],"SQL":[40],"Injection":[41],"and":[42,77,106,152,154,186,226],"Cross-Site":[43],"Scripting":[44],"(XSS),":[45],"by":[46],"tampering":[47,57,94,132],"with":[48,192],"parameters":[50],"API.":[52],"Efficient":[53],"detection":[54],"parameter":[56,93,131,150],"attacks":[58,133],"API":[60,104,170],"is":[61,67,222],"critical":[62],"to":[63,91,128,143,160,224,245],"ensure":[64],"system":[66],"running":[68],"in":[69],"expected":[71],"condition,":[72],"further":[73],"avoiding":[74],"leakage":[76],"property":[78],"loss.":[79],"Previous":[80],"works":[81],"always":[82],"utilize":[83],"rule-based":[85,180],"method":[86,90],"or":[87],"simple":[88],"learning-based":[89],"detect":[92,129,161],"attacks.":[95],"However,":[96],"they":[97],"ignore":[98],"contextual":[100],"information":[101],"tokens":[105],"thus":[107],"have":[108],"a":[109,138,157,208,229],"poor":[110],"performance.":[111],"In":[112],"this":[113],"paper,":[114],"we":[115],"propose":[116],"C":[118],"ontext-based":[119],"M":[120],"alicious":[121],"P":[122],"arameter":[123],"D":[124],"etection":[125],"(CMPD)":[126],"framework":[127],"APIs.":[135],"We":[136],"neural":[139],"network":[140],"language":[141],"model":[142,159],"learn":[144],"distribution":[146],"parameters,":[149],"names,":[151],"URLs":[153],"then":[155],"tree":[158],"malicious":[163],"query":[164],"based":[165],"on":[166,188],"high":[168],"dimensional":[169],"embedding.":[171],"Experiments":[172],"show":[173],"CMPD":[175,204],"outperforms":[176],"all":[177],"baseline,":[178],"method,":[181],"Support":[182],"Vector":[183],"Machine":[184],"(SVM),":[185],"Autoencoder,":[187],"CSIC":[189],"2010":[190],"dataset":[191],"$$F_1$$":[193,210,231],"<mml:math":[194,211,232],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\">":[195,212,233],"<mml:msub>":[196,213,234],"<mml:mi>F</mml:mi>":[197,214,235],"<mml:mn>1</mml:mn>":[198,215,236],"</mml:msub>":[199,216,237],"</mml:math>":[200,217,238],"value":[201,218,239],"reaching":[202],"0.971.":[203],"also":[206],"achieve":[207,228],"0.895":[209],"when":[219,240],"training":[220],"reduced":[223,244],"20%":[225],"0.910":[230],"negative":[241],"examples":[242],"are":[243],"1%.":[246]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}