Numerical encoding to Tame SQL injection attacks

Proceedings of the NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium

Volumn , Issue , 2016, Pages 1253-1256

  Uwagbole, Solomon Ogbomon ^a   Buchanan, William J ^a   Fan, Lu ^a  

^a EDINBURGH NAPIER UNIVERSITY   (United Kingdom)

Author keywords

NETSQLIA; numerical attributes encoding; SQL Injection; SQLIA; SQLIA neurons

Indexed keywords

ARTIFICIAL INTELLIGENCE; CLASSIFICATION (OF INFORMATION); ENCODING (SYMBOLS); LEARNING SYSTEMS; NETWORK SECURITY; NEURAL NETWORKS; PATTERN MATCHING; PIPELINE PROCESSING SYSTEMS; WORLD WIDE WEB;

INTERNET OF THING (IOT); NETSQLIA; NONDETERMINISTIC FINITE AUTOMATON; NUMERICAL ATTRIBUTES; SQL INJECTION; SQLIA; STATISTICAL MACHINE LEARNING; SUPERVISED LEARNING APPROACHES;

COMPUTER CRIME;

EID: 84979769188     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NOMS.2016.7502997     Document Type: Conference Paper

References (15)

1. OWASP, "OWASP Top 10-2013," OWASP Top 10, p. 22, 2013
2. OWASP, "Web Application Firewall," 2015. [Online]. Available: https://www.owasp.org/index.php/Web-Application -Firewall. [Accessed: 15-Nov-2015]
3. Microsoft Azure, "Microsoft Azure Machine Learning Studio," Microsoft Azure Machine Learning. [Online]. Available: https://studio.azureml.net/. [Accessed: 25-Jan-2015]
4. Oracle, "SQL Injection Cookbook-Oracle-OWASP," OWASP, 2007. [Online]. Available: ttps://www.owasp.org/index.php/SQL -Injection-Cookbook---Oracle. [Accessed: 01-Jan-2015]
5. Microsoft Azure, "Two-Class Averaged Perceptron," MSDN. [Online]. Available: https://msdn.microsoft.com/en-us/library/az ure/dn906036.aspx. [Accessed: 19-Feb-2016]
6. Microsoft Azure, "Two-Class Logistic Regression," MSDN Library,2015.[Online].Available:https://msdn.microsoft.com/enus/ library/azure/dn905994.aspx. [Accessed: 01-Feb-2016]
7. W. G. J. Halfond, A. Orso, D. A. Kindy, and A. S. K. Pathan, "AMNESIA: Analysis and Monitoring for NEutralizing SQLinjection Attacks," Int. J. Commun. Networks Inf. Secur., vol. 5, pp. 80-92, 2013
8. S. J. Stolfo, "KDD cup 1999 dataset," UCI KDD Repos. http//kdd.ics.uci.edu, p. 0, 1999
9. L. K. Shar, L. C. Briand, H. K. Tan, and S. Member, "Hybrid Program Analysis and Machine Learning," vol. 12, no. 6, pp. 688-707, 2015
10. S. W. Boyd and A. D. Keromytis, "SQLrand: Preventing SQL injection attacks," in Applied Cryptography and Network Security, 2004, pp. 292-302
11. A. Liu, Y. Yuan, D. Wijesekera, and A. Stavrou, "SQLProb: A Proxy-based Architecture towards Preventing SQL Injection Attacks," System, pp. 2054-2061, 2009
12. C. Gould, Z. Su, and P. Devanbu, "JDBC checker a static analysis tool for SQL/JDBC applications," in Software Engineering, 2004. ICSE 2004. Proceedings. 26th International Conference on, 2004, pp. 697-698
13. W. G. J. Halfond and A. Orso, "Preventing SQL Injection Attacks Using AMNESIA." Proc. 20th IEEE/ACM Int. Conf. Autom. Softw. Eng., pp. 174-183, 2005
14. MSDN, "Matching Behavior." [Online]. Available: https://msdn.microsoft.com/en-us/library/0yzc2yb0(v=vs.100). Aspx. [Accessed: 07-Jun-2015]
15. E. Lawrence, "Fiddler free web debugging proxy," Telerik. [Online]. Available: http://www.telerik.com/fiddler. [Accessed: 11-Feb-2015]