Advancing SQL Injection Detection for High-Speed Data Centers: A Novel Approach Using Cascaded NLP
Kasim Tasdemir,Rafiullah Khan,Fahad Siddiqui,Sakir Sezer,Fatih Kurugollu,Sena Busra Yengec-Tasdemir,Alperen Bolat
2023-12-20
Abstract:Detecting SQL Injection (SQLi) attacks is crucial for web-based data center security, but it is challenging to balance accuracy and computational efficiency, especially in high-speed networks. Traditional methods struggle with this balance, while NLP-based approaches, although accurate, are computationally intensive.
We introduce a novel cascade SQLi detection method, blending classical and transformer-based NLP models, achieving a 99.86% detection accuracy with significantly lower computational demands-20 times faster than using transformer-based models alone. Our approach is tested in a realistic setting and compared with 35 other methods, including Machine Learning-based and transformer models like BERT, on a dataset of over 30,000 SQL sentences.
Our results show that this hybrid method effectively detects SQLi in high-traffic environments, offering efficient and accurate protection against SQLi vulnerabilities with computational efficiency. The code is available at <a class="link-external link-https" href="https://github.com/gdrlab/cascaded-sqli-detection" rel="external noopener nofollow">this https URL</a> .
Cryptography and Security