Structured query language injection attack detection method and related equipment

Abstract

This application discloses a structured query language injection attack detection method and related equipment. In this method, after the target character string to be detected is obtained, the target character string is segmented into multiple target words, and multiple target words are obtained. Arranging the constructed word sequence in order of target words, and according to the respective occurrence probabilities of multiple attack phrases in the pre-built SQL attack database, the first probability that the word sequence is composed of multiple attack words in the SQL attack database can be determined. The first probability determined can more accurately reflect the possibility that the target character string corresponding to the word sequence belongs to the SQL injection attack, so that it can more accurately detect the possibility that the target character string belongs to the SQL injection attack. It is beneficial to reduce the false detection rate and false negative rate of detecting SQL injection attacks.

Description

technical field [0001] The present application relates to the field of network technology, in particular to a structured query language injection attack detection method and related equipment. Background technique [0002] Structured Query Language (SQL) injection attack is a common network attack. It adds SQL commands to query strings such as web page requests or input domain names, and finally tricks the server into executing malicious SQL commands. [0003] At present, the protection against SQL injection attacks mainly uses regular expressions, such as extracting the SQL statement to be detected from the access request, matching the extracted SQL statement with multiple pre-written regular expressions, and based on the regular expression The matching result analyzes whether the SQL statement belongs to a SQL injection attack. Detecting SQL injection attacks based on regular expressions relies on different regular expressions written by users based on various SQL injecti...

AI Technical Summary

Problems solved by technology

[0004] However, due to the many forms of SQL injection attacks and the variability of SQL injection attacks, it is impossible to guarantee that the regular expressions can fully cover all existing and possible forms of SQL injection attacks, resulting in SQL injection attacks. High false negative rate

Moreover, because the rules of the regular expression itself are relatively complex, rule conflicts are likely to occur between different regular expressions, so that the effects of different regular expressions affect or cancel each other, resulting in a high false positive rate for detecting SQL injection attacks

Images