[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-121056-en":3,"doc-seo-121056-105":30,"detail-sidebar-cat-0-en-105":91},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":20,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":14,"update_tm":28,"read_time":29},121056,2336464648322,"Aria","https://ap-avatar.wpscdn.com/avatar/2200025388227c56fec?_k=1778556882303663488",8,"Research & Report","Detection of SQL Injection Attacks Based on Supervised Machine Learning Algorithms: A Review","In the rapidly evolving field of cybersecurity, protecting web applications and sensitive databases demands robust methods to maintain confidentiality and integrity. SQL injection stands out among critical vulnerabilities due to its potential for unauthorized access and severe downstream impact. This review surveys recent research efforts that apply supervised machine learning to identify, detect, and mitigate SQL injection attacks, contrasting them with limitations of rule-based approaches. Findings show strong potential and promising accuracy for supervised models in SQL injection detection.","International Journal of Informatics, Information System and Computer Engineering  \nDetection of SQL Injection Attacks Based on Supervised Machine Learning Algorithms: A Review  \nHilmi Salih Abdullah*, Adnan Mohsin Abdulazeez **  \n*Technical Informatics College, Akre University for Applied Sciences, Iraq  \n**Technical College of Engineering, Duhok Polytechnic University, Iraq  \n*[Corresponding Email: Hilmi.Salih@auas.edu.krd](Corresponding Email: Hilmi.Salih@auas.edu.krd)  \nA B S T R A C T S  \nIn the ever-changing world of cybersecurity, it is becoming more important to ensure integrity of web applications as well as securing sensitive data. Among a variety of vulnerabilities, SQL injection is considered a significant risk with severe consequences. Addressing this crucial threat has always attracted the researchers to explore various approaches to identify and detect SQL injection attacks. The machine learning has captured the attention of the researchers to explore its potential due to its success in several different fields and the limitation of other rule-based approaches. This study provides a comprehensive review on a variety of the most recent researches that have been carried out using supervised learning algorithms. The study reveals that machine learning has a huge potential in the process of identification and detection of SQL injection attacks.  \n© 2024 Tim Konferensi UNIKOM  \nA R T I C L E I N F O  \nArticle History:  \nReceived 18 Feb 2024  \nRevised 02 Mar 2024  \nAccepted 28s Mar 2024 Available online 25 Apr 2024 Publication date 01 Dec 2024  \nKeywords:  \nSQL Injection,  \nMachine Learning, Supervised ML Algorithms  \n1. INTRODUCTION  \nIn the rapidly evolving cybersecurity landscape, ensuring the confidentiality and integrity of sensitive data is extremely important by securing web applications against vulnerabilities. Among the various security threats, SQL injection vulnerability is considered a serious threat that poses a serious risk to web applications. Based on the Open Web Application Security Project (OWASP), SQL Injection is a crucial vulnerability and ranked in the list of top 10 vulnerabilities (Demilie & Deriba, 2022) . SQL injection vulnerability is exploited by attackers via injecting malicious SQL code to web applications in order to gain unauthorized access to sensitive data stored in the databases (Bharati & Kumar, 2022) (Goyal & Matta, 2023) . SQL injection can be classified into several types which exploits various weaknesses in web applications (Hubskyi, et al., 2020; Singh, et al., 2015) . Researchers have tried to eliminate the risk of this threat and utilized various approaches such as static, dynamic and hybrid approaches to identify and detect SQL injection vulnerabilities and attacks (Zhumabekova et al., 2023) (Sadeeq & Abdulazeez, 2023) . However, due to the limitations of these rule-based approaches, the researchers investigated about more robust and versatile solutions (Abdulmalik, 2021; Hasan, et al., 2019; Nasereddin, et al., 2023) . Therefore, the success of machine learning in many fields, attracted the researchers to explore its capabilities it in the field of security. Moreover, machine learning approaches have proved to be a good solution to identify SQL injection attacks instead of rule-based approaches (Deriba, [et. al](et. al)., 2022; Roy, [et. al](et. al)., 2022) (Kunang, et al., 2021) . This paper aims to review recent researches that utilized supervised  \nmachine learning algorithms to identify, detect and prevent SQL injection attacks. First a comprehensive review has been conducted on recent researches. Then the methods and algorithms of each research have been analyzed and extracted as well as the accuracy results. Moreover, according to the conducted review, the supervised machine learning algorithms have obtained promising results in SQL injection attacks identification and detection. The paper's organization is as follows: Section 2 introduces the background of SQL injec","cbCaikiEoZoWv3Xm","https://ap.wps.com/l/cbCaikiEoZoWv3Xm","pdf",792561,1,14,"English","en",105,"# Introduction\n## Background study\n### SQL Injection\n## Supervised machine learning approaches\n## Methods of the review\n## Results and discussion\n## Conclusion","[{\"question\":\"Why are SQL injection attacks considered a serious threat to web applications?\",\"answer\":\"SQL injection enables attackers to inject malicious SQL code through poorly handled user inputs, which can expose, modify, or delete sensitive data. The threat is also recognized as part of the OWASP top vulnerabilities due to its impact.\"},{\"question\":\"What is the focus of this review paper?\",\"answer\":\"The review focuses on recent studies that use supervised machine learning algorithms to identify, detect, and prevent SQL injection attacks. It also analyzes extracted methods and reports accuracy results.\"},{\"question\":\"How does supervised machine learning address limitations of rule-based approaches?\",\"answer\":\"The paper explains that rule-based techniques have limitations, motivating researchers to pursue more robust solutions. Supervised machine learning is presented as a more effective approach for SQL injection identification and detection, with promising performance in reported studies.\"}]","Detection of SQL Injection Attacks Based on Supervised Machine Learning Algorithms: A Review | PDF",1785733519,35,{"code":4,"msg":31,"data":32},"ok",{"site_id":24,"language":23,"slug":33,"title":13,"keywords":34,"description":14,"schema_data":35,"social_meta":86,"head_meta":88,"extra_data":90,"updated_unix":28},"detection-of-sql-injection-attacks-based-on-supervised-machine-learning-algorithms-a-review","",{"@graph":36,"@context":85},[37,54,68],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/document/","Document",2,{"item":49,"name":12,"@type":43,"position":50},"https://docshare.wps.com/document/research-report/",3,{"item":52,"name":13,"@type":43,"position":53},"https://docshare.wps.com/document/detection-of-sql-injection-attacks-based-on-supervised-machine-learning-algorithms-a-review/121056/",4,{"url":52,"name":13,"@type":55,"author":56,"headline":13,"publisher":58,"fileFormat":61,"inLanguage":23,"description":14,"dateModified":62,"datePublished":62,"encodingFormat":61,"isAccessibleForFree":63,"interactionStatistic":64},"DigitalDocument",{"name":9,"@type":57},"Person",{"url":41,"name":59,"@type":60},"DocShare","Organization","application/pdf","2026-08-03",true,{"@type":65,"interactionType":66,"userInteractionCount":20},"InteractionCounter",{"@type":67},"ViewAction",{"@type":69,"mainEntity":70},"FAQPage",[71,77,81],{"name":72,"@type":73,"acceptedAnswer":74},"Why are SQL injection attacks considered a serious threat to web applications?","Question",{"text":75,"@type":76},"SQL injection enables attackers to inject malicious SQL code through poorly handled user inputs, which can expose, modify, or delete sensitive data. The threat is also recognized as part of the OWASP top vulnerabilities due to its impact.","Answer",{"name":78,"@type":73,"acceptedAnswer":79},"What is the focus of this review paper?",{"text":80,"@type":76},"The review focuses on recent studies that use supervised machine learning algorithms to identify, detect, and prevent SQL injection attacks. It also analyzes extracted methods and reports accuracy results.",{"name":82,"@type":73,"acceptedAnswer":83},"How does supervised machine learning address limitations of rule-based approaches?",{"text":84,"@type":76},"The paper explains that rule-based techniques have limitations, motivating researchers to pursue more robust solutions. Supervised machine learning is presented as a more effective approach for SQL injection identification and detection, with promising performance in reported studies.","https://schema.org",{"og:url":52,"og:type":87,"og:title":13,"og:site_name":59,"og:description":14},"article",{"robots":89,"canonical":52},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":92},[93,97,101,105,110,115,120,123,128,131,135],{"id":20,"doc_module":4,"doc_module_name":46,"category_name":94,"show_sort_weight":95,"slug":96},"Story & Novel",90,"story-novel",{"id":47,"doc_module":4,"doc_module_name":46,"category_name":98,"show_sort_weight":99,"slug":100},"Literature",80,"literature",{"id":53,"doc_module":4,"doc_module_name":46,"category_name":102,"show_sort_weight":103,"slug":104},"Exam",70,"exam",{"id":106,"doc_module":4,"doc_module_name":46,"category_name":107,"show_sort_weight":108,"slug":109},5,"Comic",60,"comic",{"id":111,"doc_module":4,"doc_module_name":46,"category_name":112,"show_sort_weight":113,"slug":114},6,"Technology",50,"technology",{"id":116,"doc_module":4,"doc_module_name":46,"category_name":117,"show_sort_weight":118,"slug":119},7,"Healthcare",40,"healthcare",{"id":11,"doc_module":4,"doc_module_name":46,"category_name":12,"show_sort_weight":121,"slug":122},30,"research-report",{"id":124,"doc_module":4,"doc_module_name":46,"category_name":125,"show_sort_weight":126,"slug":127},9,"Religion & Spirituality",20,"religion-spirituality",{"id":126,"doc_module":4,"doc_module_name":46,"category_name":129,"show_sort_weight":126,"slug":130},"World Cup","world-cup",{"id":132,"doc_module":4,"doc_module_name":46,"category_name":133,"show_sort_weight":132,"slug":134},10,"Lifestyle","lifestyle",{"id":136,"doc_module":4,"doc_module_name":46,"category_name":137,"show_sort_weight":106,"slug":138},19,"General","general"]