Application of machine learning and artificial intelligence in detecting SQL injection attacks

More recently, cyber-attacks have also been on the rise and SQL injection attacks are some of major threats to data security. AI and machine learning have come a long way, however their usage in cybersecurity is still somewhat nascent. The main aim of this work is focusing on solving the IT-related...

Full description

Bibliographic Details
Main Authors: Md Sultan, Abu Bakar, Agiliga, Nwabudike Augustine, Osman, Mohd Hafeez Bin, Sharif, Khaironi Yatim
Format: Article
Language:English
Published: Indonesian Society for Knowledge and Human Development 2024
Online Access:http://psasir.upm.edu.my/id/eprint/118126/
http://psasir.upm.edu.my/id/eprint/118126/1/118126.pdf
_version_ 1848867437854851072
author Md Sultan, Abu Bakar
Agiliga, Nwabudike Augustine
Osman, Mohd Hafeez Bin
Sharif, Khaironi Yatim
author_facet Md Sultan, Abu Bakar
Agiliga, Nwabudike Augustine
Osman, Mohd Hafeez Bin
Sharif, Khaironi Yatim
author_sort Md Sultan, Abu Bakar
building UPM Institutional Repository
collection Online Access
description More recently, cyber-attacks have also been on the rise and SQL injection attacks are some of major threats to data security. AI and machine learning have come a long way, however their usage in cybersecurity is still somewhat nascent. The main aim of this work is focusing on solving the IT-related challenge lack-of-adequate knowledge bases and tools for security practitioners to monitor and mitigate SQL Injection attacks with AI/ML techniques. The study uses a mixed-methods approach to evaluate how well different AI and ML algorithms identify SQL injection attacks by combining algorithmic evaluation with empirical investigation. Datasets of well-known SQL injection attack patterns and AI/ML models intended for cybersecurity anomaly detection are among the resources underexplored, these findings show the potential for boosting detection capabilities by deploying ML and AI-based security solutions, with some algorithms scoring up to an 80 percent success rate in identifying SQL injections. But while the tool usage seems to be effective three-quarters of survey respondents reported less bad stuff getting through, with a similar number able to get more done in less time as security researchers or incident response practitioners on top of that adoption among cybersecurity pros was below 30%, demonstrating an opportunity gap between what could leverage and folks actually using it. This will help lay a groundwork for future work in terms of identifying the best solutions and providing potential approaches to incorporating AI/ML into cybersecurity frameworks. The implications of this study indicate that the adoption robust defenses against SQL injection and other cyber threats could increase many folds if we can continue to research and implement AI ML technologies.
first_indexed 2025-11-15T14:36:29Z
format Article
id upm-118126
institution Universiti Putra Malaysia
institution_category Local University
language English
last_indexed 2025-11-15T14:36:29Z
publishDate 2024
publisher Indonesian Society for Knowledge and Human Development
recordtype eprints
repository_type Digital Repository
spelling upm-1181262025-06-25T23:49:29Z http://psasir.upm.edu.my/id/eprint/118126/ Application of machine learning and artificial intelligence in detecting SQL injection attacks Md Sultan, Abu Bakar Agiliga, Nwabudike Augustine Osman, Mohd Hafeez Bin Sharif, Khaironi Yatim More recently, cyber-attacks have also been on the rise and SQL injection attacks are some of major threats to data security. AI and machine learning have come a long way, however their usage in cybersecurity is still somewhat nascent. The main aim of this work is focusing on solving the IT-related challenge lack-of-adequate knowledge bases and tools for security practitioners to monitor and mitigate SQL Injection attacks with AI/ML techniques. The study uses a mixed-methods approach to evaluate how well different AI and ML algorithms identify SQL injection attacks by combining algorithmic evaluation with empirical investigation. Datasets of well-known SQL injection attack patterns and AI/ML models intended for cybersecurity anomaly detection are among the resources underexplored, these findings show the potential for boosting detection capabilities by deploying ML and AI-based security solutions, with some algorithms scoring up to an 80 percent success rate in identifying SQL injections. But while the tool usage seems to be effective three-quarters of survey respondents reported less bad stuff getting through, with a similar number able to get more done in less time as security researchers or incident response practitioners on top of that adoption among cybersecurity pros was below 30%, demonstrating an opportunity gap between what could leverage and folks actually using it. This will help lay a groundwork for future work in terms of identifying the best solutions and providing potential approaches to incorporating AI/ML into cybersecurity frameworks. The implications of this study indicate that the adoption robust defenses against SQL injection and other cyber threats could increase many folds if we can continue to research and implement AI ML technologies. Indonesian Society for Knowledge and Human Development 2024 Article PeerReviewed text en cc_by_sa_4 http://psasir.upm.edu.my/id/eprint/118126/1/118126.pdf Md Sultan, Abu Bakar and Agiliga, Nwabudike Augustine and Osman, Mohd Hafeez Bin and Sharif, Khaironi Yatim (2024) Application of machine learning and artificial intelligence in detecting SQL injection attacks. International Journal on Advanced Science, Engineering and Information Technology, 8 (4). pp. 2131-2138. ISSN 2088-5334; eISSN: 2460-6952 https://joiv.org/index.php/joiv/article/view/3631 10.62527/joiv.8.4.3631
spellingShingle Md Sultan, Abu Bakar
Agiliga, Nwabudike Augustine
Osman, Mohd Hafeez Bin
Sharif, Khaironi Yatim
Application of machine learning and artificial intelligence in detecting SQL injection attacks
title Application of machine learning and artificial intelligence in detecting SQL injection attacks
title_full Application of machine learning and artificial intelligence in detecting SQL injection attacks
title_fullStr Application of machine learning and artificial intelligence in detecting SQL injection attacks
title_full_unstemmed Application of machine learning and artificial intelligence in detecting SQL injection attacks
title_short Application of machine learning and artificial intelligence in detecting SQL injection attacks
title_sort application of machine learning and artificial intelligence in detecting sql injection attacks
url http://psasir.upm.edu.my/id/eprint/118126/
http://psasir.upm.edu.my/id/eprint/118126/
http://psasir.upm.edu.my/id/eprint/118126/
http://psasir.upm.edu.my/id/eprint/118126/1/118126.pdf