{"id":"https://openalex.org/W7130649153","doi":"https://doi.org/10.51317/jcst.v4i1.919","title":"A Hybrid Deep Learning Framework with Honeypot-Assisted Intelligence for SQL Injection Detection","display_name":"A Hybrid Deep Learning Framework with Honeypot-Assisted Intelligence for SQL Injection Detection","publication_year":2026,"publication_date":"2026-02-20","ids":{"openalex":"https://openalex.org/W7130649153","doi":"https://doi.org/10.51317/jcst.v4i1.919"},"language":"en","primary_location":{"id":"doi:10.51317/jcst.v4i1.919","doi":"https://doi.org/10.51317/jcst.v4i1.919","is_oa":true,"landing_page_url":"https://doi.org/10.51317/jcst.v4i1.919","pdf_url":null,"source":{"id":"https://openalex.org/S4387284062","display_name":"Journal of Computer Science and Technology (JCST)","issn_l":"2958-115X","issn":["2958-115X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Science and Technology (JCST)","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.51317/jcst.v4i1.919","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000154275","display_name":"Fredrick Ochieng Okello","orcid":"https://orcid.org/0000-0003-0987-0726","observed_orcids":["https://orcid.org/0000-0003-0987-0726"]},"institutions":[{"id":"https://openalex.org/I3131121749","display_name":"Kabarak University","ror":"https://ror.org/009b5t134","country_code":"KE","type":"education","lineage":["https://openalex.org/I3131121749"]}],"countries":["KE"],"is_corresponding":false,"raw_author_name":"Fredrick Ochieng Okello","raw_affiliation_strings":["Kabarak University, Kenya"],"raw_orcid":"https://orcid.org/0000-0003-0987-0726","affiliations":[{"raw_affiliation_string":"Kabarak University, Kenya","institution_ids":["https://openalex.org/I3131121749"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045810606","display_name":"Andrew Kiprop Kipkebut","orcid":"https://orcid.org/0009-0004-0301-1845","observed_orcids":["https://orcid.org/0009-0004-0301-1845"]},"institutions":[{"id":"https://openalex.org/I3131121749","display_name":"Kabarak University","ror":"https://ror.org/009b5t134","country_code":"KE","type":"education","lineage":["https://openalex.org/I3131121749"]}],"countries":["KE"],"is_corresponding":false,"raw_author_name":"Andrew Kipkebut","raw_affiliation_strings":["Kabarak University, Kenya"],"raw_orcid":"https://orcid.org/0009-0004-0301-1845","affiliations":[{"raw_affiliation_string":"Kabarak University, Kenya","institution_ids":["https://openalex.org/I3131121749"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5125121954","display_name":"Dr. Ruth Oginga","orcid":"https://orcid.org/0009-0004-8301-6901","observed_orcids":["https://orcid.org/0009-0004-8301-6901"]},"institutions":[{"id":"https://openalex.org/I3131121749","display_name":"Kabarak University","ror":"https://ror.org/009b5t134","country_code":"KE","type":"education","lineage":["https://openalex.org/I3131121749"]}],"countries":["KE"],"is_corresponding":false,"raw_author_name":"Ruth Oginga","raw_affiliation_strings":["Kabarak University, Kenya"],"raw_orcid":"https://orcid.org/0009-0004-8301-6901","affiliations":[{"raw_affiliation_string":"Kabarak University, Kenya","institution_ids":["https://openalex.org/I3131121749"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I3131121749"],"apc_list":null,"apc_paid":null,"fwci":3.6254,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.89982833,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"4","issue":"1","first_page":"1","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9678000211715698,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9678000211715698,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0215000007301569,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.005900000222027302,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sql-injection-detection","display_name":"SQL injection detection","score":0.996999979019165},{"id":"https://openalex.org/keywords/honeypots","display_name":"honeypots","score":0.7450000047683716},{"id":"https://openalex.org/keywords/database-driven-web-applications","display_name":"database-driven web applications","score":0.699999988079071},{"id":"https://openalex.org/keywords/cnn-lstm","display_name":"CNN-LSTM","score":0.6990000009536743},{"id":"https://openalex.org/keywords/autoencoder-anomaly-detection","display_name":"autoencoder anomaly detection","score":0.9639999866485596},{"id":"https://openalex.org/keywords/hybrid-deep-learning","display_name":"hybrid deep learning model","score":0.7089999914169312}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7900999784469604},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6891999840736389},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.6728000044822693},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5845999717712402},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5831999778747559},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5440000295639038},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.49079999327659607},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.4424000084400177},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.40070000290870667},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.3910999894142151},{"id":"https://openalex.org/C2778712577","wikidata":"https://www.wikidata.org/wiki/Q3505966","display_name":"Retraining","level":2,"score":0.38920000195503235},{"id":"https://openalex.org/C510870499","wikidata":"https://www.wikidata.org/wiki/Q47607","display_name":"SQL","level":2,"score":0.3824999928474426},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35260000824928284},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.34619998931884766},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.3197000026702881},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.3109999895095825},{"id":"https://openalex.org/C125014702","wikidata":"https://www.wikidata.org/wiki/Q4680749","display_name":"Adaptive learning","level":2,"score":0.30250000953674316},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.28049999475479126},{"id":"https://openalex.org/C146849305","wikidata":"https://www.wikidata.org/wiki/Q370766","display_name":"Ground truth","level":2,"score":0.2777999937534332},{"id":"https://openalex.org/C58973888","wikidata":"https://www.wikidata.org/wiki/Q1041418","display_name":"Semi-supervised learning","level":2,"score":0.27129998803138733},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.2660999894142151},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.26460000872612},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.260699987411499},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.25780001282691956}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.51317/jcst.v4i1.919","doi":"https://doi.org/10.51317/jcst.v4i1.919","is_oa":true,"landing_page_url":"https://doi.org/10.51317/jcst.v4i1.919","pdf_url":null,"source":{"id":"https://openalex.org/S4387284062","display_name":"Journal of Computer Science and Technology (JCST)","issn_l":"2958-115X","issn":["2958-115X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Science and Technology (JCST)","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.51317/jcst.v4i1.919","doi":"https://doi.org/10.51317/jcst.v4i1.919","is_oa":true,"landing_page_url":"https://doi.org/10.51317/jcst.v4i1.919","pdf_url":null,"source":{"id":"https://openalex.org/S4387284062","display_name":"Journal of Computer Science and Technology (JCST)","issn_l":"2958-115X","issn":["2958-115X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Science and Technology (JCST)","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7125954839","https://openalex.org/W7135046717","https://openalex.org/W7147457534","https://openalex.org/W6968262783","https://openalex.org/W7123363998","https://openalex.org/W7136199514","https://openalex.org/W7118993975","https://openalex.org/W4386031814","https://openalex.org/W7163911651","https://openalex.org/W7139987526"],"abstract_inverted_index":{"The":[0,26,62,196],"purpose":[1],"of":[2,17,43,118,135,148,153,158,165],"this":[3,179],"article":[4],"is":[5],"to":[6,39,93,110],"propose":[7],"a":[8,65,89,111,132,209],"hybrid":[9],"deep":[10],"learning":[11,33],"framework":[12,28],"for":[13,68,124,212],"the":[14,41,171],"effective":[15],"detection":[16,46,76,142],"SQL":[18,138],"injection":[19],"(SQLi)":[20],"attacks":[21],"in":[22],"database-driven":[23],"web":[24],"applications.":[25],"proposed":[27],"integrates":[29],"supervised":[30,69,201],"and":[31,52,99,121,162,185,205],"unsupervised":[32],"techniques":[34],"with":[35,72,189],"honeypot-assisted":[36],"intelligence":[37,60,126,187],"collection":[38],"address":[40],"limitations":[42],"existing":[44],"SQLi":[45,214],"systems,":[47],"which":[48],"are":[49,86,108],"largely":[50],"reactive":[51],"primarily":[53],"focused":[54],"on":[55,79,131,182],"classification":[56],"accuracy":[57,147],"without":[58],"adaptive":[59,190,213],"mechanisms.":[61],"architecture":[63,172],"combines":[64],"CNN\u2013LSTM":[66],"pathway":[67,77],"pattern":[70],"recognition":[71],"an":[73,145,163],"autoencoder-based":[74],"anomaly":[75,203],"trained":[78],"benign":[80],"queries.":[81],"Outputs":[82],"from":[83],"both":[84,97],"pathways":[85],"fused":[87],"through":[88],"learned":[90],"fusion":[91],"layer":[92],"improve":[94],"robustness":[95],"against":[96],"known":[98],"previously":[100],"unseen":[101],"attack":[102,119],"variants.":[103],"Queries":[104],"classified":[105],"as":[106,193],"malicious":[107],"redirected":[109],"low-interaction":[112],"database":[113],"honeypot,":[114],"enabling":[115],"structured":[116],"capture":[117],"payloads":[120],"behavioural":[122],"artefacts":[123],"security":[125],"generation.":[127],"Experimental":[128],"evaluation":[129],"conducted":[130],"curated":[133],"dataset":[134],"approximately":[136],"50,000":[137],"queries":[139],"demonstrates":[140],"strong":[141],"performance,":[143],"achieving":[144],"average":[146],"99.2":[149],"per":[150,155,160],"cent,":[151,156,161],"precision":[152],"98.9":[154],"recall":[157],"99.0":[159],"AUC":[164],"0.99":[166],"across":[167],"multiple":[168],"runs.":[169],"Although":[170],"supports":[173],"closed-loop":[174],"retraining":[175,191],"using":[176],"honeypot-captured":[177],"data,":[178],"study":[180],"focuses":[181],"offline":[183],"performance":[184],"initial":[186],"acquisition,":[188],"identified":[192],"future":[194],"work.":[195],"results":[197],"demonstrate":[198],"that":[199],"integrating":[200],"learning,":[202],"detection,":[204],"deception":[206],"mechanisms":[207],"provides":[208],"robust":[210],"foundation":[211],"defence":[215],"systems.":[216]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2026-02-20T00:00:00"}