Return
SQL injection attack detection in network flow data
DOI:10.1016/j.cose.2023.103093.png)
Abstract
En 中文
SQL injections rank in the OWASP Top 3. The literature shows that analyzing network datagrams allows for detecting or preventing such attacks. Unfortunately, such detection usually implies studying all pack-ets flowing in a computer network. Therefore, routers in charge of routing significant traffic loads usually cannot apply the solutions proposed in the literature. This work demonstrates that detecting SQL in-jection attacks on flow data from lightweight protocols is possible. For this purpose, we gathered two datasets collecting flow data from several SQL injection attacks on the most popular database engines. After evaluating several machine learning-based algorithms, we get a detection rate of over 97% with a false alarm rate of less than 0.07% with a Logistic Regression-based model.(c) 2023 The Authors. Published by Elsevier Ltd. This is an open access article under the CC BY-NC-ND license ( http://creativecommons.org/licenses/by-nc-nd/4.0/ )
Keywords:
Ensamble learning
Machine learning
Netflow
Network security
SQLIA detection
AI Summary
Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.
Journal
C
IF:
5.4
Papers:
4.6K
Citations:
1.4W
Organization
Cited Papers
Flow-Data Gathering Using NetFlow Sensors for Fitting Malicious-Traffic Detection Models
SENSORS
IF3.5
A geologic map of the sea floor in western Massachusetts Bay, constructed from digital sidescan-sonar images, photography, and sediment samples
Data Series
IF0

