Determining Web Application Vulnerabilities Using Machine Learning Methods

2023

Closed access Metadata (CSL-JSON)
DOI 10.1109/opcs59592.2023.10275756
Data confidence 70 medium
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

Information technology is a significant factor in the modern world. This area is developing quickly, becoming essential as new, more complex protection methods appear. Threat detection instruments have also been actively developing for recent decades. The available scanning systems allow to disclose many threats. Moreover, machine and deep learning Artificial intelligence methods have been developing significantly. With so many penetration testing scanners available, choosing the most effective scanner can be daunting as it depends on the specific testing environment. This paper focuses on detecting SQL injection threats with the use of such machine learning algorithms as Naïve Bayes, Support Vector Machine, Decision Tree, Random Forest, XGBoost, and CatBoost. The analyzed dataset contains safe and dangerous SQL commands that various websites have been exposed to. The classification model results showed that most applied algorithms demonstrated perfect accuracy, precision, recall, and F1-score values above 0.95. These high scores proved to be efficient in the SQL injection classification tasks.