SQL injection attack detection method, system and related equipment

Abstract

The present invention discloses a SQL injection attack detection method, system and related equipment, which relate to network information security technology. The method comprises: preprocessing a plurality of collected SQL injection samples as training data; performing three-stage training on a large security model using the preprocessed training data; the first stage is unsupervised pre-training using the preprocessed training data, the second stage is first fine-tuning using a Mixture of Experts architecture and a multi-task head form, and the third stage is secondary fine-tuning using a comparative learning method; receiving traffic data to be detected, inputting the data into a trained large security detection model, and detecting SQL injection attacks in the traffic data to be detected. The method solves the technical problem that traditional SQL injection attack detection methods have obvious insufficient detection capabilities and flexibility for complex and changeable advanced SQL injection attacks, thereby achieving the technical effect of significantly improving the accuracy and efficiency of SQL injection attack detection.

Images