SQL injection attack detection method using the approximation function of zeta distribution
Taiki Oosawa, Takeshi Matsuda · 2014
SQL injection attack is one of web application attack which intend to give damage to database on web application, it is the growing serious problem with increasing internet users. Generally, SQL injection attack is detected by listing system using web application firewall, but listing system has weakness for detecting a new attack. In order to overcome the weakness, detection method using machine learning and probabilistic model have been studied. However, that still has not reached a basic solution. In this paper, we give the formula to calculate the parameter of zeta distribution, and we propose a SQL injection attack detection method using the above formula. In addition, we have experimented to evaluate the performance of our proposed method, and we confirmed that the detection performance of attack data is well by comparing some conventional method.