arrow
Return

A cybersecurity method to detect SQL injection attacks using heuristic-driven feature selection and machine learning algorithms

delete2025-12-26
delete0
PRE
AI
B
Bahman Arasteh *
M
Mohammadbagher Karimi
K
Keyvan Arasteh
F
Farzad Kiani
DOI:10.1007/s11227-025-08165-ydelete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
SQL injection is a serious security risk that allows attackers to access application databases. SQL injection attacks can be identified using various methods, including machine learning algorithms. Finding the top-performing features in the training dataset is a combinatorial optimization problem known to be NP-complete. Finding the dataset's most effective and significant features is the goal of feature selection. This study aims to optimize the sensitivity, specificity, and accuracy of the SQL injection detection method. The first stage of the suggested method involved creating a unique training dataset with 13 characteristics. A binary form of the Whale Optimization Algorithm was suggested to find the most effective features in the dataset. An effective SQL injection detection system was developed by combining the whale algorithm as a feature selector with various machine learning techniques. The suggested SQL injection detector achieved 98.88% accuracy, 99.35% sensitivity, and a 98.83% F1-score using an artificial neural network and the whale optimizer. Using the proposed strategy to select about 31% of the features improved the performance of the attack detectors.
Keywords:
Cybersecurity
SQL injection
Optimal feature selection
Binary whale algorithm
Machine learning algorithms

Journal

T
The Journal of Supercomputing
IF:
0
Papers:
647
Citations:
0

Organization

F
faculty of engineering and natural science
Scholars:
27
Papers: 19
Citations: 0
F
Faculty of Computer and Information Technology
Scholars:
13
Papers: 6
Citations: 0
D
Department of Computer Science
Scholars:
1.7K
Papers: 998
Citations: 8
D
data science application and research center
Scholars:
4
Papers: 4
Citations: 0
researcher View more organizations
Cited Papers

Cited Papers

The Whale Optimization Algorithm
err2016-05-01
err9.5K
PREAI
errMirjalili, Seyedali; Lewis, Andrew
errShare
errSave
A software defect prediction method using binary gray wolf optimizer and machine learning algorithms
err2024-08-01
err5
PREAI
errWang, Hao; Arasteh, Bahman; Arasteh, Keyvan; Gharehchopogh, Farhad Soleimanian; Rouhi, Alireza
errShare
errSave
errShare
errSave
An effective new penetration test approach to detect web attacks on web applications
err2025-09-27
err0
PREAI
errMuhammed Onur Kaya; Huseyin Alperen Dagdogen; Mehmet Ozdem; Resul Das
errShare
errSave
Effective Filter for Common Injection Attacks in Online Web Applications
err2021-01-01
err10
errOAAI
errIbarra-Fiallos, Santiago; Higuera, Javier Bermejo; Intriago-Pazmino, Monserrate; Higuera, Juan Ramon Bermejo; Montalvo, Juan Antonio Sicilia; Cubo, Javier
errShare
errSave
SQL injection attack detection in network flow data
err2023-04-01
err18
errOAAI
errCrespo-Martinez, Ignacio Samuel; Campazas-Vega, Adrian; Guerrero-Higueras, Angel Manuel; Riego-DelCastillo, Virginia; Alvarez-Aparicio, Claudia; Fernandez-Llamas, Camino
errShare
errSave
errShare
errSave
researcher View more