Abstract:

SQL injection attacks pose a common threat to the security of Web applications. This paper proposed a new technique based on hidden Markov mode for protecting existing Web application against SQL injection.Features of SQL statements can be obtained by word segmentation parsing.We take bothhidden Markov mode and similarity distance methods,and identify the true illegal SQL statements.Experimental results prove that this proposed approach is simple and effectivefor detecting illegal SQL statements.

Key words: HMM, hidden Markov mode, SQL injection