Query Log Analysis for SQL Injection Detection

Alexandra Rocha, Rui Alves, Tiago Pedrosa, Tiago Pedrosa, Tiago Pedrosa

2023

Abstract

Nowadays, more and more services are dependent on the use of resources hosted on the web. The realization of operations such as access to the account bank, credit card operations, among other operations, is something increasingly common in current times, demonstrating not only human dependence on the internet connection, as well as the need to adapt the web resources to the daily life of society. As a result of this growing dependency, web resources now provide a greater amount of confidential information, making the risk of a cyberattack and information leaking grow considerably. In the web context, one of the most well-known attacks is SQL injection that allows the attacker to exploit, through the injection of malicious queries, access to confidential information. This paper suggests a solution for the detection of SQL injection via web resources, using the analysis of the logs of the executed queries.

Paper Citation

in Harvard Style

Rocha A., Alves R. and Pedrosa T. (2023). Query Log Analysis for SQL Injection Detection. In Proceedings of the 9th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-624-8, pages 471-476. DOI: 10.5220/0011667200003405

in Bibtex Style

@conference{icissp23,
author={Alexandra Rocha and Rui Alves and Tiago Pedrosa},
title={Query Log Analysis for SQL Injection Detection},
booktitle={Proceedings of the 9th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2023},
pages={471-476},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0011667200003405},
isbn={978-989-758-624-8},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 9th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - Query Log Analysis for SQL Injection Detection
SN - 978-989-758-624-8
AU - Rocha A.
AU - Alves R.
AU - Pedrosa T.
PY - 2023
SP - 471
EP - 476
DO - 10.5220/0011667200003405