SQL injection recognition method based on machine learning and adapting to scenes automacitally

Abstract

The invention relates to the technical field of digital information transmission, particularly relates to a SQL injection recognition method based on machine learning and adapting to scenes automacitally, which comprises a machine learning process and a machine protection process. The machine learning process comprises deploying a firewall, separating SQL sentences in traffic, learning SQL characteristics in a machine learning manner, learning traffic characteristics in the machine learning manner, and recognizing SQL injection. The machine protection process includes deploying firewall, separating SQL sentences from traffic, judging the danger of SQL sentences, judging the danger of traffic characteristics, identifying the SQL injection, and users participating in firewall tuning. The SQLinjection recognition method of the present invention is different from a traditional SQL injection detection model. Under the condition of ignorance of the background situation, the possible SQL injection can be detected only by analyzing the input of the user, and the threat degrees can be graded. Defense can be implemented without writing rules, thereby reducing the rate of false positives.

Description

technical field [0001] The invention relates to the technical field of digital information transmission, in particular to a machine learning-based SQL injection recognition method that automatically adapts to scenarios. Background technique [0002] SQL (Structured Query Language) is a domain-specific language used in programming to manage data stored in a relational database management system (RDBMS), or for stream processing in a relational data stream management system (RDSMS). SQL injection is a code injection technique used to attack data-driven applications. Malicious SQL statements are inserted into input fields for execution (such as dumping database content to the attacker). SQL injection must be exploited in the application software. SQL injection is often referred to as an attack vector for websites, but it can be used to attack any type of SQL database. SQL injection attacks allow attackers to spoof identities, tamper with existing data, cause rejection issues (s...

AI Technical Summary

Problems solved by technology

However, this type of research often faces difficulties such as insufficient data volume, low quality, and manual generation, and cannot actually generate effective enterprise applications.

Images