Please use this identifier to cite or link to this item: http://hdl.handle.net/10366/134933
CBRid4SQL: A CBR Intrusion Detector for SQL Injection Attacks: Profile on PlumX
Title: CBRid4SQL: A CBR Intrusion Detector for SQL Injection Attacks
Authors: Pinzón, Cristian
Herrero Cosío, Álvaro
de Paz Santana, Juan F.
Corchado Rodríguez, Emilio
Bajo Pérez, Javier
Keywords: Computer Science
Issue Date: 2010
Publisher: Springer Science + Business Media
Citation: Hybrid Artificial Intelligence Systems Lecture Notes in Computer Science. Lecture Notes in Computer Science. Volumen 6077, pp. 510-519.
Abstract: One of the most serious security threats to recently deployed databases has been the SQL Injection attack. This paper presents an agent specialised in the detection of SQL injection attacks. The agent incorporates a Case-Based Reasoning engine which is equipped with a learning and adaptation capacity for the classification of malicious codes. The agent also incorporates advanced algorithms in the reasoning cycle stages. The reuse phase uses an innovative classification model based on a mixture of a neuronal network together with a Support Vector Machine in order to classify the received SQL queries in the most reliable way. Finally, a visualisation neural technique is incorporated, which notably eases the revision stage carried out by human experts in the case of suspicious queries. The Classifier Agent was tested in a real-traffic case study and its experimental results, which validate the performance of the proposed approach, are presented here.
URI: http://hdl.handle.net/10366/134933
ISBN: 978-3-642-13802-7 (Print) / 978-3-642-13803-4 (Online)
ISSN: 0302-9743 (Print) / 1611-3349 (Online)
Appears in Collections:BISITE. Congresos

Files in This Item:
File Description SizeFormat 
cbrid4sql_a_cbr_intrusion_detector_for_sql_injection_attacks.pdf608,87 kBAdobe PDFThumbnail
View/Open


This item is is subject to a Creative Commons License