Data-mining based SQL injection attack detection using internal query trees
We propose a framework to detect SQL injection attacks at database level. To use classification algorithm, internal query trees transform into feature vectors. Our feature extraction methods use syntactic and semantic features of query trees. Our feature transformation methods use combined statistical models. Experimental results using query trees of PostgreSQL validate our proposal.
sql injection attack database intrusion detection data mining svm