Skip to content
#small language model Review Open access

Artificial Intelligence-Based Web Attack Detection: A Survey of Machine Learning, Deep Learning, Transformer and Large Language Model Approaches

Aug 2026 · Frontiers in Computing and Intelligent Systems · 0 citations · 18 references

TL;DR

The next big jump will not be driven by larger parameters, but smaller, more visible and dynamic systems that can be trusted by security analysts, as well as a disconnect between lab and reality.

Abstract

Web services are now pervasive in almost all industries, but this has made them a major target for hackers. Traditional signature-based solutions are no longer effective against zero‑day and polymorphic threats that evolve rapidly. The much heralded game‑changer is artificial intelligence (AI) particularly deep learning and more recently large language models. But the literature is fragmented: CNNs learn local features, Transformers capture long-range dependencies, and LLMs offer semantic understanding - yet each suffers from real-world limitations on interpretability, efficiency and security. In this survey we chart this progress and suggest that it's not model accuracy but trustworthiness that matters most. We carve up benchmark datasets (CSIC2010, CICIDS2017) and see a disconnect between lab and reality. Our message: the next big jump will not be driven by larger parameters, but smaller, more visible and dynamic systems that can be trusted by security analysts.

Read PDF

Similar papers

Review 2026

Hybrid Ensemble Learning For Malicious URL Detection: A Literature Review of Machine Learning, Deep Learning, and Feature-Fusion Approaches

The rapid evolution of phishing, malware distribution, and other web-based attacks has made malicious Uniform Resource Locator (URL) detection an important cybersecurity research problem. Traditional blacklist and rule-based mechanisms provide efficient protection against known malicious addresses but may fail when att...

Ashwini B. Sable, Vijay More · 0 citations
Open access Oct 2026

A Hybrid Deep-Learning Framework for Detecting AI-Generated Phishing Attacks in Cloud-Based Communication Systems

Generative artificial intelligence has altered the operational character of phishing. Large language models can produce fluent, context-sensitive and highly personalised messages that resemble routine organisational correspondence, weakening filters that depend heavily on spelling errors, suspicious keywords or previou...

Santanu Jana · 0 citations
#generative ai Open access Sep 2026

Development of an AI-Based Model for Predicting Cyber Attacks Using ML and Generative Techniques

Across the datasets tested, this hybrid, explainability-aware approach consistently outperformed conventional intrusion detection baselines on prediction accuracy, detection capability and adaptability to new attack types, positioning it as a scalable model for real-time attack prediction and security analysis in moder...

Lalith Nivas Yadlapalli, C. N., S. Chintalapudi · 0 citations
Conference Open access 2026

A Lightweight NLP-CNN Framework Based on Semantic Flow Representation for Network Intrusion Detection

One lesson emerges from the experiments: putting the effort into how traffic is written down, instead of making the classifier heavier, offers an economical and workable path to intrusion detection across heterogeneous network environments.

Asmaa Benchama, Khalid Zebbara · 0 citations
Open access Sep 2026

Lightweight AI Models for Cyber Threat Detection: An Evaluation of MobileNetV2, Random Forest, and CNN-LSTM for Phishing and Network Anomaly Detection

This work contributes a comparative evaluation of lightweight detection models, consistent attention to security-critical metrics, and interpretable insights to support practical cybersecurity deployment.

Nwagbara Chisom Telvin, Gilbert Imuetin Osaze Aimufua, Raymond Ternenge Igbudu · 0 citations
Conference Sep 2026

Deep detection method for web attacks based on spatial attention and CNN-GRU

Web application security faces significant threats from SQL injection (SQLi) and Cross-Site Scripting (XSS) attacks, which are characterized by high variability and concealment. Traditional detection methods relying on rule matching or shallow machine learning features struggle to identify novel and obfuscated attacks....

Rong Liu · 0 citations

Related blog posts

Microsoft Research Blog Oct 12, 2026

Simulating student learning for better AI tutoring

StudentSim is a research system for evaluating and improving AI tutoring tools before they are tested with learners. It models how individuals may engage with tutors, giving feedback to improve tutor performance across subjects like chess, writing, and mathematics. The post Simulating student learning for better AI tutoring appeared first on Microsoft Research.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.