본문 바로가기
  • Home

A Proposal of an LSTM-Based Machine Learning and Hybrid Application Security Testing Architecture for Web Vulnerability Detection

  • Journal of The Korea Society of Computer and Information
  • Abbr : JKSCI
  • 2026, 31(1), pp.1~12
  • Publisher : The Korean Society Of Computer And Information
  • Research Area : Engineering > Computer Science
  • Received : October 22, 2025
  • Accepted : December 29, 2025
  • Published : January 30, 2026

Ha Young Kim 1 Seong-Cho Hong 1 Ah Reum Kang 1

1배재대학교

Accredited

ABSTRACT

This study proposes an HAST architecture that integrates a machine learning–based LSTM model with SAST and DAST to address the growing number of vulnerabilities in web application environments. An analysis of previous studies reveals several limitations in existing web vulnerability detection approaches, including the lack of standardized datasets, limited domain generalization, and insufficient responsiveness to real-time attack scenarios. To overcome these challenges, the proposed architecture combines LSTM-based request sequence analysis with a unified SAST–DAST pipeline. The proposed HAST structure supports real-time request detection, coordinated static and dynamic analysis, and a retrainable expansion mechanism, enabling a stepwise response to evolving web application environments and emerging attack patterns. The results are expected to support the development of an integrated response framework for web vulnerability detection and to provide a structural design foundation for future research.

Citation status

* References for papers published after 2024 are currently being built.