SQL injection attack identification method based on machine learning

Abstract

The invention discloses an SQL injection attack recognition method based on machine learning, which comprises the following steps: S1, obtaining request data: establishing a target range containing an SQL injection target hole, collecting related data containing SQL injection by using an SQLMAP and artificial penetration mode, and classifying and marking the related data; s2, related data feature engineering: carrying out data cleaning on related data, extracting feature data and converting the feature data into vectors; s3, machine learning: training the vectors through a classifier model by adopting an ensemble learning algorithm, and carrying out final category judgment by adopting a judgment method that minority obeys majority to obtain a classifier model for SQL injection detection; and S4, SQL injection attack identification: performing feature engineering and vectorization processing on the Web request data, then entering a classifier model for prediction, and identifying the SQL injection attack. According to the method, the SQL injection attack recognition efficiency can be effectively improved, and the safety is improved.

Description

technical field [0001] The invention relates to the technical field of network data security, in particular to a machine learning-based SQL injection attack identification method. Background technique [0002] Web-based applications typically rely on back-end database servers to manage application-specific persistent state and to extract data by executing queries composed using input provided by the application's users. If the user's request is not handled correctly, the attacker can change the structure of the SQL statement by manipulating user input. As a result, the server may suffer from SQL injection attacks based on web applications, and even endanger the security of the database. [0003] SQL injection attack detection is divided into pre-intrusion detection and post-intrusion detection. Pre-intrusion detection can be done manually or by using SQL injection tool software. The purpose of detection is to prevent SQL injection attacks, and the detection after SQL injec...

AI Technical Summary

Problems solved by technology

[0005] The present invention aims to solve the technical problem that people cannot timely and effectively prevent SQL injection attacks when using Internet data in the prior art, and provides a machine learning-based SQL injection attack identification method, which can effectively improve the efficiency of SQL injection attack identification and improve security sex

Images