首页>
外国专利>
Anomaly-based detection of SQL injection attacks
Anomaly-based detection of SQL injection attacks
展开▼
机译:基于异常的SQL注入攻击检测
展开▼
页面导航
摘要
著录项
相似文献
摘要
A method for detecting a SQL injection attack comprises a training phase and a detection phase. In the training phase, a plurality of SQL queries is transformed into a respective plurality of SQL token domain queries which are processed using a n-gram analysis to provide a threshold and an averaging vector. In the detection phase, each newly arrived SQL query is transformed into a new SQL token domain query, and the n-gram analysis is applied together with the averaging vector and the threshold to each new SQL token domain query to determine if the new SQL query is normal or abnormal. The detection may be online or offline.
展开▼