Machine Learning Blunts the Needle of Advanced SQL Injections

Simple item page
dc.contributor.authorVolkova, Marina
dc.contributor.authorChmelar, Petr
dc.contributor.authorSobotka, Lukas
dc.coverage.issue1cs
dc.coverage.volume25cs
dc.date.accessioned2020-05-05T07:21:09Z
dc.date.available2020-05-05T07:21:09Z
dc.date.issued2019-06-24cs
dc.description.abstractSQL injection is one of the most popular and serious information security threats. By exploiting database vulnerabilities, attackers may get access to sensitive data or enable compromised computers to conduct further network attacks. Our research is focused on applying machine learning approaches for identication of injection characteristics in the HTTP query string. We compare results from Rule-based Intrusion Detection System, Support Vector Machines, Multilayer Perceptron, Neural Network with Dropout layers, and Deep Sequential Models (Long Short-Term Memory, and Gated Recurrent Units) using multiple string analysis, bag-of-word techniques, and word embedding for query string vectorization. Results proved benets of applying machine learning approach for detection malicious pattern in HTTP query string.en
dc.formattextcs
dc.format.extent23-30cs
dc.format.mimetypeapplication/pdfen
dc.identifier.citationMendel. 2018 vol. 25, č. 1, s. 23-30. ISSN 1803-3814cs
dc.identifier.doi10.13164/mendel.2019.1.023en
dc.identifier.issn2571-3701
dc.identifier.issn1803-3814
dc.identifier.urihttp://hdl.handle.net/11012/186977
dc.language.isoencs
dc.publisherInstitute of Automation and Computer Science, Brno University of Technologycs
dc.relation.ispartofMendelcs
dc.relation.urihttps://mendel-journal.org/index.php/mendel/article/view/74cs
dc.rightsCreative Commons Attribution-NonCommercial-ShareAlike 4.0 International licenseen
dc.rights.accessopenAccessen
dc.rights.urihttp://creativecommons.org/licenses/by-nc-sa/4.0en
dc.subjectSQL injection identicationen
dc.subjectmachine learningen
dc.subjectdeep learningen
dc.subjectrecurrent neural networksen
dc.subjecttext analysisen
dc.subjectweb application firewallen
dc.subjectintrusion detection systemen
dc.titleMachine Learning Blunts the Needle of Advanced SQL Injectionsen
dc.type.driverarticleen
dc.type.statusPeer-revieweden
dc.type.versionpublishedVersionen
eprints.affiliatedInstitution.facultyFakulta strojního inženýrstvícs
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
2019-1-023.pdf
Size:
1007.55 KB
Format:
Adobe Portable Document Format
Description:
Download
Collections
Vol. 25, No. 1