Abstract
AbstractSQL injection (SQLi) attacks are one of the oldest and most serious security threats, consistently ranking among the top ten critical web security risks. Traditional defense mechanisms against SQL injection predominantly use blacklists to disallow common injection characters or terms. However, the major challenge for these systems is to create a comprehensive list of potential SQLi characters, terms, and multi-terms that encompass various types of SQLi attacks (time-based, error-based, etc.), taking into account various SQL datasets (such as MySQL, Oracle, and NoSQL). Recently, some research studies have concentrated on feature learning from SQL queries by applying some well-known deep architectures to detect SQLi attacks. Motivated by a similar objective, this research introduces a novel deep learning-based SQLi detection system named “Bidirectional LSTM-CNN based on Multi-View Consensus” (MVC-BiCNN). The proposed method implements a pre-processing step that generates multiple views from SQL data by semantically encoding SQL statements into their corresponding SQL tags. By utilizing two different main layers, which are bidirectional long short-term memory (LSTM) and convolutional neural network (CNN), the proposed method learns a joint latent space from multi-view representations. In the detection phase, the proposed method yields separate predictions for each representation and assesses whether the query constitutes an SQLi attack based on a consensus function’s output. Moreover, Interpretable Model-Agnostic Annotations (LIME), one of the methods of Explainable Artificial Intelligence (XAI), is employed for the purpose of interpreting the model’s results and analyzing the SQL injection (SQLi) inputs. The experimental results demonstrate that MVC-BiCNN outperforms the baseline methods, yielding 99.96% detection rate.
Funder
Istanbul Medeniyet University
Publisher
Springer Science and Business Media LLC
Subject
Computer Networks and Communications,Safety, Risk, Reliability and Quality,Information Systems,Software
Reference30 articles.
1. Lee, I., Jeong, S., Yeo, S., Moon, J.: A novel method for SQL injection attack detection based on removing SQL query attribute values. Mathematical and Computer Modelling, 55 (1-2), (2012) (Jan 1) 58-68. https://doi.org/10.1016/j.mcm.2011.01.050
2. Shar, L. K., Tan, H. B.: Defeating SQL injection. Computer, 46 (3), (2012) (Aug 10) 69-77.https://doi.org/10.1109/MC.2012.283
3. Atoum, J. O., Qaralleh, A. J.: A hybrid technique for SQL injection attacks detection and prevention. International Journal of Database Management Systems, 6 (1), (2014) (Feb 1) 21. https://doi.org/10.5121/ijdms.2014.6102
4. Aliero, M. S., Ghani, I., Qureshi, K. N., Rohani, M. F.: An algorithm for detecting SQL injection vulnerability using black-box testing. Journal of Ambient Intelligence and Humanized Computing, 11 (1), (2020) (Jan) 249-66. https://doi.org/10.1007/s12652-019-01235-z
5. Latchoumi, T. P., Reddy, M. S., Balamurugan, K.: Applied machine learning predictive analytics to SQL injection attack detection and prevention. European Journal of Molecular & Clinical Medicine, 7 (02), (2020)