arrow
Return

SQL injection attack detection in network flow data

delete2023-04-01
delete18
delete
OA
AI
I
Ignacio Samuel Crespo-Martínez *
A
Adrián Campazas
Á
Ángel Manuel Guerrero‐Higueras
V
Virginia Riego del Castillo
C
Claudia Álvarez-Aparicio
C
Camino Fernández
DOI:10.1016/j.cose.2023.103093delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
SQL injections rank in the OWASP Top 3. The literature shows that analyzing network datagrams allows for detecting or preventing such attacks. Unfortunately, such detection usually implies studying all pack-ets flowing in a computer network. Therefore, routers in charge of routing significant traffic loads usually cannot apply the solutions proposed in the literature. This work demonstrates that detecting SQL in-jection attacks on flow data from lightweight protocols is possible. For this purpose, we gathered two datasets collecting flow data from several SQL injection attacks on the most popular database engines. After evaluating several machine learning-based algorithms, we get a detection rate of over 97% with a false alarm rate of less than 0.07% with a Logistic Regression-based model.(c) 2023 The Authors. Published by Elsevier Ltd. This is an open access article under the CC BY-NC-ND license ( http://creativecommons.org/licenses/by-nc-nd/4.0/ )
Keywords:
Ensamble learning
Machine learning
Netflow
Network security
SQLIA detection
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

C
Computers and Security
IF:
5.4
Papers:
4.6K
Citations:
1.4W

Organization

U
universidad de leon
Scholars:
4.9K
Papers: 3.8K
Citations: 3
Cited Papers

Cited Papers

Flow-Data Gathering Using NetFlow Sensors for Fitting Malicious-Traffic Detection Models
errSENSORS
IF3.5
err2020-12-18
err12
errOAAI
errCampazas-Vega, Adrian; Crespo-Martinez, Ignacio Samuel; Guerrero-Higueras, Angel Manuel; Fernandez-Llamas, Camino
errShare
errSave
Formal potentials and cyclic voltammetry of some ruthenium-ammine complexes
err2002-05-01
err0
PREAI
errHong Sup Lim; Donald J. Barclay; Fred C. Anson
errShare
errSave
Hydration and dehydration kinetics of xylazine hydrochloride
err2009-07-27
err0
PREAI
errAgris Bērziņš; Andris Actiņš; Juris P.Kreišmanis
errShare
errSave
errShare
errSave
Combination of Nifedipine and Doxazosin in Essential Hypertension
err1992-04-01
err0
errOAAI
errRichard Donnelly; Henry L. Elliott; Peter A. Meredith; Catherine A. Howie; John L. Reid
errShare
errSave
errShare
errSave
Inter-Coder Agreement for Computational Linguistics
err2008-12-01
err921
errOAAI
errArtstein, Ron; Poesio, Massimo
errShare
errSave
researcher View more