A detection method, system and computer processing equipment for sql injection attack

Abstract

The present invention provides a method for detecting SQL injection attacks. The method includes: obtaining SQL to be detected; decomposing the SQL to be detected into multiple SQL samples according to preset rules; and inputting the multiple SQL samples into the In the corresponding number of preset decision-making models, the decision-making results are respectively obtained; the decision-making results corresponding to the number of multiple SQL samples are compared, and according to the comparison results, it is judged whether the SQL to be detected is an injection attack. In this way, the obtained SQL can be decomposed into multiple SQL samples, each sample is processed, and the decision result is obtained, and then it is determined whether it is an SQL injection attack according to the number of decision results, so as to detect SQL injection attacks more accurately .

Description

Technical field[0001]The present invention relates to the field of Internet technologies, and in particular, to a detection method, system, and computer processing of SQL injection attacks.Background technique[0002]In recent years, SQL injection attacks are always in front of the top three of the Web security threat. The attacker is injected into the attack through SQL, which can achieve illegal purposes such as websites, web tampering, information stealing and permeating inside. Therefore, SQL injection attacks have seriously affecting Web security and normal operation.[0003]The so-called SQL injection is the query string that submits the SQL command to the web form or the field name or page request, eventually reaches the spoofer to perform a malicious SQL command. Specifically, it uses existing applications to inject the malicious SQL command into the power execution of the background database engine, which can get a database on the website where the malicious SQL statement is en...

AI Technical Summary

Problems solved by technology

Due to the diversity of SQL statements, the first type has a high false positive rate. Although the second type uses regular matching to reduce the false positive rate, the accuracy of SQL detection is still low. The third type requires the server to learn legal SQL statements. Otherwise, the legal SQL statement will be treated as an illegal SQL statement, which also has the problem of low accuracy

Images