Publicação
Query log analysis for SQL injection detection
| Resumo: | Nowadays, more and more services are dependent on the use of resources hosted on the web. The realization of operations such as access to the account bank, credit card operations, among other operations, is something increasingly common in current times, demonstrating not only human dependence on the internet connection, as well as the need to adapt the web resources to the daily life of society. As a result of this growing dependency, web resources now provide a greater amount of confidential information, making the risk of a cyberattack and information leaking grow considerably. In the web context, one of the most well-known attacks is SQL injection that allows the attacker to exploit, through the injection of malicious queries, access to confidential information. This paper suggests a solution for the detection of SQL injection via web resources, using the analysis of the logs of the executed queries. |
|---|---|
| Autores principais: | Rocha, Alexandra |
| Outros Autores: | Alves, Rui; Pedrosa, Tiago |
| Assunto: | SQL Injection IDS MySQL Attacks Detection |
| Ano: | 2023 |
| País: | Portugal |
| Tipo de documento: | comunicação em conferência |
| Tipo de acesso: | acesso aberto |
| Instituição associada: | Universidade Politécnica de Bragança |
| Idioma: | inglês |
| Origem: | Biblioteca Digital da UPB |
| _version_ | 1877782216657862656 |
|---|---|
| author | Rocha, Alexandra |
| author2 | Alves, Rui Pedrosa, Tiago |
| author2_role | author author |
| author_facet | Rocha, Alexandra Alves, Rui Pedrosa, Tiago |
| author_role | author |
| contributor_name_str_mv | Biblioteca Digital da UPB |
| country_str | PT |
| creators_json_txt | [{\"Person.name\":\"Rocha, Alexandra\"},{\"Person.name\":\"Alves, Rui\",\"Person.identifier.cienciaID\":\"A716-1D09-38A0\",\"Person.identifier.orcid\":\"0000-0003-4128-8779\",\"Person.identifier.scopusAuthorID\":\"57219876713\"},{\"Person.name\":\"Pedrosa, Tiago\",\"Person.identifier.cienciaID\":\"B81E-0583-AEDF\",\"Person.identifier.orcid\":\"0000-0003-4873-2705\",\"Person.identifier.researcherID\":\"G-2249-2011\",\"Person.identifier.scopusAuthorID\":\"35318153700\"}] |
| datacite.contributors.contributor.contributorName.fl_str_mv | Biblioteca Digital da UPB |
| datacite.creators.creator.creatorName.fl_str_mv | Rocha, Alexandra Alves, Rui Pedrosa, Tiago |
| datacite.date.Accepted.fl_str_mv | 2023-01-01T00:00:00Z |
| datacite.date.available.fl_str_mv | 2024-01-05T10:06:10Z |
| datacite.date.embargoed.fl_str_mv | 2024-01-05T10:06:10Z |
| datacite.rights.fl_str_mv | http://purl.org/coar/access_right/c_abf2 |
| datacite.subjects.subject.fl_str_mv | SQL Injection IDS MySQL Attacks Detection |
| datacite.titles.title.fl_str_mv | Query log analysis for SQL injection detection |
| dc.contributor.none.fl_str_mv | Biblioteca Digital da UPB |
| dc.creator.none.fl_str_mv | Rocha, Alexandra Alves, Rui Pedrosa, Tiago |
| dc.date.Accepted.fl_str_mv | 2023-01-01T00:00:00Z |
| dc.date.available.fl_str_mv | 2024-01-05T10:06:10Z |
| dc.date.embargoed.fl_str_mv | 2024-01-05T10:06:10Z |
| dc.format.none.fl_str_mv | application/pdf |
| dc.identifier.none.fl_str_mv | http://hdl.handle.net/10198/29101 |
| dc.language.none.fl_str_mv | eng |
| dc.rights.cclincense.fl_str_mv | http://creativecommons.org/licenses/by/4.0/ |
| dc.rights.none.fl_str_mv | http://purl.org/coar/access_right/c_abf2 |
| dc.subject.none.fl_str_mv | SQL Injection IDS MySQL Attacks Detection |
| dc.title.fl_str_mv | Query log analysis for SQL injection detection |
| dc.type.none.fl_str_mv | http://purl.org/coar/resource_type/c_5794 |
| description | Nowadays, more and more services are dependent on the use of resources hosted on the web. The realization of operations such as access to the account bank, credit card operations, among other operations, is something increasingly common in current times, demonstrating not only human dependence on the internet connection, as well as the need to adapt the web resources to the daily life of society. As a result of this growing dependency, web resources now provide a greater amount of confidential information, making the risk of a cyberattack and information leaking grow considerably. In the web context, one of the most well-known attacks is SQL injection that allows the attacker to exploit, through the injection of malicious queries, access to confidential information. This paper suggests a solution for the detection of SQL injection via web resources, using the analysis of the logs of the executed queries. |
| dirty | 0 |
| eu_rights_str_mv | openAccess |
| format | conferencePaper |
| fulltext.url.fl_str_mv | https://bibliotecadigital.unipb.pt/bitstreams/bea6bb77-8694-49b9-a47a-9a92a768828d/download |
| funder_facet_str_mv | FCT{{{_:::_}}}Fundação para a Ciência e a Tecnologia FCT{{{_:::_}}}Fundação para a Ciência e a Tecnologia |
| funding.funder.alternateName_str_mv | FCT FCT |
| funding.funder.identifier_str_mv | http://doi.org/10.13039/501100001871 http://doi.org/10.13039/501100001871 |
| funding.funder.name_str_mv | Fundação para a Ciência e a Tecnologia Fundação para a Ciência e a Tecnologia |
| funding.identifier_str_mv | UIDB/05757/2020 UIDP/05757/2020 |
| funding.name_str_mv | 6817 - DCRRNI ID 6817 - DCRRNI ID |
| funding_str_mv | UIDB/05757/2020 info:eu-repo/grantAgreement/FCT/6817 - DCRRNI ID/UIDB%2F05757%2F2020/PT UIDP/05757/2020 info:eu-repo/grantAgreement/FCT/6817 - DCRRNI ID/UIDP%2F05757%2F2020/PT |
| id | ipb_466835be3cec72d99cd7bc7e5f0c2ebd |
| identifier.url.fl_str_mv | http://hdl.handle.net/10198/29101 |
| inst_facet_str | urn:organizationAcronym:unipb{{{_:::_}}}Universidade Politécnica de Bragança |
| instacron_str | unipb |
| institution | Universidade Politécnica de Bragança |
| instname_str | Universidade Politécnica de Bragança |
| language | eng |
| network_acronym_str | ipb |
| network_name_str | Biblioteca Digital da UPB |
| oai_identifier_str | oai:bibliotecadigital.unipb.pt:10198/29101 |
| organization_str_mv | urn:organizationAcronym:unipb |
| person_str_mv | Rocha, Alexandra Alves, Rui Alves, Rui https://www.ciencia-id.pt/A716-1D09-38A0 A716-1D09-38A0 http://orcid.org/0000-0003-4128-8779 0000-0003-4128-8779 Pedrosa, Tiago Pedrosa, Tiago https://www.ciencia-id.pt/B81E-0583-AEDF B81E-0583-AEDF http://orcid.org/0000-0003-4873-2705 0000-0003-4873-2705 |
| publishDate | 2023 |
| repo_facet_str | urn:repositoryAcronym:ipb{{{_:::_}}}Biblioteca Digital da UPB |
| reponame_str | Biblioteca Digital da UPB |
| repository_id_str | urn:repositoryAcronym:ipb |
| service_str_mv | urn:repositoryAcronym:ipb |
| spelling | engpt_PTNowadays, more and more services are dependent on the use of resources hosted on the web. The realization of operations such as access to the account bank, credit card operations, among other operations, is something increasingly common in current times, demonstrating not only human dependence on the internet connection, as well as the need to adapt the web resources to the daily life of society. As a result of this growing dependency, web resources now provide a greater amount of confidential information, making the risk of a cyberattack and information leaking grow considerably. In the web context, one of the most well-known attacks is SQL injection that allows the attacker to exploit, through the injection of malicious queries, access to confidential information. This paper suggests a solution for the detection of SQL injection via web resources, using the analysis of the logs of the executed queries.application/pdfpt_PTQuery log analysis for SQL injection detectionRocha, AlexandraPersonalAlves, RuiDSpacehttp://dspace.org/items/59025c90-9178-412c-ae43-fe1a6122c72aDSpacehttp://dspace.org/items/59025c90-9178-412c-ae43-fe1a6122c72aAlvesRuiCiência IDhttps://www.ciencia-id.ptA716-1D09-38A0ORCIDhttp://orcid.org0000-0003-4128-8779Scopus Author IDhttps://www.scopus.com57219876713PersonalPedrosa, TiagoDSpacehttp://dspace.org/items/fee2835e-2230-4414-a58e-bcba895d1f0bDSpacehttp://dspace.org/items/fee2835e-2230-4414-a58e-bcba895d1f0bPedrosaTiagoCiência IDhttps://www.ciencia-id.ptB81E-0583-AEDFORCIDhttp://orcid.org0000-0003-4873-2705Researcher IDhttps://www.researcherid.comG-2249-2011Scopus Author IDhttps://www.scopus.com35318153700HostingInstitutionOrganizationalBiblioteca Digital da UPBe-mailmailto:dspace@unipb.ptdspace@unipb.ptISBNIsPartOf978989758624-8ISSNIsPartOf2184-4356DOIIsPartOf10.5220/00116672000034052024-01-05T10:06:10Z20232023-01-01T00:00:00ZHandlehttp://hdl.handle.net/10198/29101http://purl.org/coar/access_right/c_abf2open accessSQL InjectionIDSMySQLAttacksDetection366343 bytesFundação para a Ciência e a TecnologiaResearch Centre in Digitalization and Intelligent Roboticsinfo:eu-repo/grantAgreement/FCT/6817 - DCRRNI ID/UIDB%2F05757%2F2020/PTUIDB/05757/20206817 - DCRRNI IDCrossref Funder IDhttp://doi.org/10.13039/501100001871Fundação para a Ciência e a TecnologiaResearch Centre in Digitalization and Intelligent Roboticsinfo:eu-repo/grantAgreement/FCT/6817 - DCRRNI ID/UIDP%2F05757%2F2020/PTUIDP/05757/20206817 - DCRRNI IDCrossref Funder IDhttp://doi.org/10.13039/501100001871other research producthttp://purl.org/coar/resource_type/c_5794conference paper2023http://creativecommons.org/licenses/by/4.0/http://purl.org/coar/access_right/c_abf2application/pdffulltexthttps://bibliotecadigital.unipb.pt/bitstreams/bea6bb77-8694-49b9-a47a-9a92a768828d/downloadProceedings of the 9th International Conference on Information Systems Security and Privacy (ICISSP)1471476 |
| spellingShingle | Query log analysis for SQL injection detection Rocha, Alexandra SQL Injection IDS MySQL Attacks Detection |
| status | SINGLETON |
| subject.fl_str_mv | SQL Injection IDS MySQL Attacks Detection |
| title | Query log analysis for SQL injection detection |
| title_full | Query log analysis for SQL injection detection |
| title_fullStr | Query log analysis for SQL injection detection |
| title_full_unstemmed | Query log analysis for SQL injection detection |
| title_short | Query log analysis for SQL injection detection |
| title_sort | Query log analysis for SQL injection detection |
| topic | SQL Injection IDS MySQL Attacks Detection |
| topic_facet | SQL Injection IDS MySQL Attacks Detection |
| url | http://hdl.handle.net/10198/29101 |
| visible | 1 |