SQL Injection Attack and Detection Based on GreenSQL Pattern Input Whitelist

SQL Injection Attack and Detection Based on GreenSQL Pattern Input Whitelist

연구 분야: Databases

학회: 2020 IEEE 3rd International Conference on Information Systems and Computer Aided Education (ICISCAE)

With the rapid development of Internet technology, the era of big data is coming. SQL injection attack is the most common and the most dangerous threat to database. This paper studies the working mode and workflow of the GreenSQL database firewall. Based on the analysis of the characteristics and patterns of SQL injection attack command, the input model of GreenSQL learning is optimized by constructing the patterned input and optimized whitelist. The research method can improve the learning efficiency of GreenSQL and intercept samples in IPS mode, so as to effectively maintain the security of background database.