Abstract:Intelligent transportation is an emerging technology that integrates advanced sensors, network communication, data processing, and automatic control technologies to provide great convenience for our daily lives. With the increasing popularity of intelligent transportation, its security issues have also attracted much attention. SQL injection attack is one of the most common attacks in the intelligent transportation system. It has characteristics of various types, fast mutations, hidden attacks, etc., and leads to great harm. Most of the current SQL detection methods are based on manually defined features. The detection results are heavily dependent on the accuracy of feature extraction, so it cannot cope with the increasingly complex SQL injection attacks in the intelligent transportation system. In order to solve this problem, this paper proposes a long short-term memory based SQL injection attack detection method, which can automatically learn the effective representation of data, and has a strong advantage to confront with complex high-dimensional massive data. In addition, this paper proposes an injection sample generation method based on data transmission channel from the perspective of penetration. This method can formally model SQL injection attack and generate valid positive samples. It can effectively solve the over-fitting problem caused by insufficient positive samples. The experimental results show that the proposed method improves the accuracy of the SQL injection attack detection and reduces the false positive rate, which is better than several related classical machine learning algorithms and commonly used deep learning algorithms.

LSTM-Based SQL Injection Detection Method for Intelligent Transportation System

Deep Neural Network-Based SQL Injection Detection Method

Deep Learning in Cybersecurity: A Hybrid BERT–LSTM Network for SQL Injection Attack Detection

SAID: State-aware Defense Against Injection Attacks on In-vehicle Network

SQL Injection Behavior Mining Based Deep Learning

SQL Injection Attack Detection and Prevention Techniques Using Deep Learning

Detection of SQL Injection Based on Artificial Neural Network

An LSTM Based Malicious Traffic Attack Detection in Industrial Internet

DeepSQLi: deep semantic learning for testing SQL injection

A Semantic Learning-Based SQL Injection Attack Detection Technology

Collaborative SQL-injections detection system with machine learning

LSTM-Based False Data Injection Attack Detection in Smart Grids

Exploring Defense of SQL Injection Attack in Penetration Testing

An Illegal Target Intrusion Detection System of Railway Based on Deep Learning and Hough Transform

Study of Monitoring False Data Injection Attacks Based on Machine-learning in Electric Systems

MDHP-Net: Detecting Injection Attacks on In-vehicle Network using Multi-Dimensional Hawkes Process and Temporal Model

Effective SQL Injection Detection: A Fusion of Binary Olympiad Optimizer and Classification Algorithm

Request-Response Network Traffic Packets: Enhancing SQL Injection Attack Detection with a Transformer-Based Model

A Cyber-Attack Detection in Vehicle-to-Infrastructure Communication Based on LSTM Network

Deep Learning Architecture for Detecting SQL Injection Attacks Based on RNN Autoencoder Model

SQL Injection Detection for Web Applications Based on Elastic-Pooling CNN