Detection of SQL injection attack based on improved TFIDF algorithm

Mingyan Wang; Chen Wang

doi:10.1117/12.2652203

10 November 2022 Detection of SQL injection attack based on improved TFIDF algorithm

Mingyan Wang, Chen Wang

Proceedings Volume 12331, International Conference on Mechanisms and Robotics (ICMAR 2022); 1233139 (2022) https://doi.org/10.1117/12.2652203
Event: International Conference on Mechanisms and Robotics (ICMAR 2022), 2022, Zhuhai, China

Abstract

With the arrival of the Internet age, SQL injection is widely distributed as a web application attack method. It’s with low operating threshold and not easy to be discovered, so it seriously threatens network security, causing a large number of websites to have security risks. When the number of sensitive words and non-sensitive words in the SQL sentence data set is close, the SQL injection attack detection method based on the TFIDF algorithm has the problem of high false alarm rate. This paper proposes a detection method based on the improved TFIDF algorithm. It analyzes and compares a large number of attack statements and normal SQL statements, summarizes the characteristics of SQL statements and vectorizes the text, and adds quantification related to keywords in the formula. parameter. The purpose of this article is to use the improved TFIDF algorithm in the data preprocessing stage, use three different classifiers in the classification stage, combine SVM, KNN and DT three different machine learning algorithms, and finally compare experiments. The results prove that the improved TFIDF algorithm combined with SVM has a higher accuracy rate and a lower false alarm rate.

Citation Download Citation

Mingyan Wang and Chen Wang "Detection of SQL injection attack based on improved TFIDF algorithm", Proc. SPIE 12331, International Conference on Mechanisms and Robotics (ICMAR 2022), 1233139 (10 November 2022); https://doi.org/10.1117/12.2652203

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available

Members: $17.00

Non-members: $21.00 ADD TO CART

PROCEEDINGS
8 PAGES

DOWNLOAD PAPER SAVE TO MY LIBRARY

GET CITATION

RIGHTS & PERMISSIONS

Get copyright permission Get copyright permission on Copyright Marketplace

KEYWORDS

Detection and tracking algorithms

Data modeling

Machine learning

Performance modeling

Network security

Computer programming

Computer security

Show All Keywords

Keywords/Phrases

Search In:

Publication Years