返回
A feature selection-based method for SQL injection detection using machine learning algorithms
DOI:10.1177/18724981251385295.png)
摘要
En 中文
SQL injection (SQLi) is a serious security threat that allows attackers to access and manipulate databases through malicious input. Machine learning algorithms have shown strong potential for detecting SQL injection (SQLi) attacks. However, their performance depends heavily on the quality and relevance of the features used in training. Feature selection plays a key role in identifying the most effective, minimal set of features from the SQLi dataset. In this study, a hybrid SQLi detection method is proposed that combines feature selection with machine learning algorithms. A real-world dataset containing 13 features was first developed. Then, a hybrid Horse Herd Optimizer was developed and applied to select the most influential features before model training. Several machine learning classifiers were trained using the optimal feature set. The proposed method achieved high predictive performance, with 99.49% accuracy, 99.62% sensitivity, and 99.00% F1-score. These results were obtained using only about 45% of the original features. The reduction in feature size also improved the model's efficiency and training speed. The findings show that combining intelligent feature selection with machine learning significantly enhances SQLi detection. This approach is effective, scalable, and suitable for real-world security applications.
Keyword:
Cybersecurity
SQL injection
optimal feature extraction
machine learning algorithms
horse herd algorithm
期刊
I
IF:
0.8
论文数:
72
被引数:
0
机构
引用论文
UniEmbed: A Novel Approach to Detect XSS and SQL Injection Attacks Leveraging Multiple Feature Fusion with Machine Learning TechniquesUniEmbed:一种利用机器学习技术结合多特征融合检测XSS和SQL注入攻击的新方法
Horse herd optimization algorithm: A nature-inspired algorithm for high-dimensional optimization problems马群优化算法: 高维优化问题的自然启发算法
Effective SQL Injection Detection: A Fusion of Binary Olympiad Optimizer and Classification Algorithm有效SQL注入检测:二进制奥林匹克优化器与分类算法的融合
Mathematics
IF0
Program Source-Code Re-Modularization Using a Discretized and Modified Sand Cat Swarm Optimization Algorithm
Symmetry
IF0
Sql injection detection algorithm based on Bi-LSTM and integrated feature selection基于Bi-LSTM和集成特征选择的结构化查询语言注入检测算法
ModSec-AdvLearn: Countering Adversarial SQL Injections With Robust Machine LearningModSec-AdvLearn:用鲁棒机器学习对抗恶意SQL注入
Kakisim, A.G. A deep learning approach based on multi-view consensus for SQL injection detection. Int. J. Inf. Secur. 2024, 23, 1541–1556. [Google Scholar] [CrossRef]Kakisim, A.G. 基于多视图共识的深度学习方法用于SQL注入检测. Int. J. Inf. Secur. 2024, 23, 1541–1556. [Google Scholar] [CrossRef]

