Detecting method for structured query language injection attack and related devices

Abstract

The invention discloses a detecting method for a structured query language (SQL) injection attack and related devices. According to the method, after a to-be-detected target character string is obtained, the target character string is segmented into a plurality of target words to obtain a word sequence constructed by successive arrangement of the plurality of target words; and according to probabilities of occurrence of a plurality of attack word groups in a pre-constructed SQL attack base, a first probability of formation of the word sequence by a plurality of attack words in the SQL attack base is determined. With the determined first probability, the possibility of belonging to the SQL injection attack by the target character string corresponding to the word sequence can be reflected accurately and thus the possibility of belonging to the SQL injection attack by the target character string can be detected accurately, so that a false detection rate and a missing report rate of detecting an SQL injection attack are reduced.

Description

technical field [0001] The present application relates to the field of network technology, in particular to a structured query language injection attack detection method and related equipment. Background technique [0002] Structured Query Language (SQL) injection attack is a common network attack. It adds SQL commands to query strings such as web page requests or input domain names, and finally tricks the server into executing malicious SQL commands. [0003] At present, the protection against SQL injection attacks mainly uses regular expressions, such as extracting the SQL statement to be detected from the access request, matching the extracted SQL statement with multiple pre-written regular expressions, and based on the regular expression The matching result analyzes whether the SQL statement belongs to a SQL injection attack. Detecting SQL injection attacks based on regular expressions relies on different regular expressions written by users based on various SQL injecti...

AI Technical Summary

Problems solved by technology

[0004] However, due to the many forms of SQL injection attacks and the variability of SQL injection attacks, it is impossible to guarantee that the regular expressions can fully cover all existing and possible forms of SQL injection attacks, resulting in SQL injection attacks. High false negative rate

Moreover, because the rules of the regular expression itself are relatively complex, rule conflicts are likely to occur between different regular expressions, so that the effects of different regular expressions affect or cancel each other, resulting in a high false positive rate for detecting SQL injection attacks

Images