Skip to content
AI Sec Watch

The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.

InfoResearchPeer-reviewed

RegexStealer: A Directed-Acyclic-Graph-Based Regex Stealing Against Web Application Firewalls

Source
IEEE Xplore (Security & AI Journals)(opens in a new tab)
Published
Record updated

Summary

RegexStealer is a black-box attack that recovers a web application firewall's pre-defined rules as regular expressions. It selects probe samples with a clustering algorithm, builds a directed acyclic graph of the WAF's behavior from its responses, then converts that graph into regexes. The authors use SQL injection as the test case and report over 0.99 fidelity and more than 16 times the speed of ActiveThief and Regex Generator++.