{"id":"https://openalex.org/W4401327924","doi":"https://doi.org/10.1109/access.2024.3438092","title":"PROGESI: A PROxy Grammar to Enhance Web Application Firewall for SQL Injection Prevention","display_name":"PROGESI: A PROxy Grammar to Enhance Web Application Firewall for SQL Injection Prevention","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4401327924","doi":"https://doi.org/10.1109/access.2024.3438092"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3438092","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3438092","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2024.3438092","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092128323","display_name":"Antonio Coscia","orcid":"https://orcid.org/0000-0002-7263-4999"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Antonio Coscia","raw_affiliation_strings":["Cybersecurity Laboratory, BV TECH S.p.A., Milan, Italy","Cybersecurity Laboratory, BV TECH S.p.A., Milan, MI, Italy"],"raw_orcid":"https://orcid.org/0000-0002-7263-4999","affiliations":[{"raw_affiliation_string":"Cybersecurity Laboratory, BV TECH S.p.A., Milan, Italy","institution_ids":[]},{"raw_affiliation_string":"Cybersecurity Laboratory, BV TECH S.p.A., Milan, MI, Italy","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062626549","display_name":"Vincenzo Dentamaro","orcid":"https://orcid.org/0000-0003-1148-332X"},"institutions":[{"id":"https://openalex.org/I5561750","display_name":"University of Bari Aldo Moro","ror":"https://ror.org/027ynra39","country_code":"IT","type":"education","lineage":["https://openalex.org/I5561750"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Vincenzo Dentamaro","raw_affiliation_strings":["Department of Computer Science, University of Bari Aldo Moro, Bari, Italy","Department of Computer Science, University of Bari Aldo Moro, Bari, BA, Italy"],"raw_orcid":"https://orcid.org/0000-0003-1148-332X","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Bari Aldo Moro, Bari, Italy","institution_ids":["https://openalex.org/I5561750"]},{"raw_affiliation_string":"Department of Computer Science, University of Bari Aldo Moro, Bari, BA, Italy","institution_ids":["https://openalex.org/I5561750"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085849149","display_name":"Stefano Galantucci","orcid":"https://orcid.org/0000-0002-3955-0478"},"institutions":[{"id":"https://openalex.org/I5561750","display_name":"University of Bari Aldo Moro","ror":"https://ror.org/027ynra39","country_code":"IT","type":"education","lineage":["https://openalex.org/I5561750"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Stefano Galantucci","raw_affiliation_strings":["Department of Computer Science, University of Bari Aldo Moro, Bari, Italy","Department of Computer Science, University of Bari Aldo Moro, Bari, BA, Italy"],"raw_orcid":"https://orcid.org/0000-0002-3955-0478","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Bari Aldo Moro, Bari, Italy","institution_ids":["https://openalex.org/I5561750"]},{"raw_affiliation_string":"Department of Computer Science, University of Bari Aldo Moro, Bari, BA, Italy","institution_ids":["https://openalex.org/I5561750"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092128322","display_name":"Antonio Maci","orcid":"https://orcid.org/0000-0002-6526-554X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Antonio Maci","raw_affiliation_strings":["Cybersecurity Laboratory, BV TECH S.p.A., Milan, Italy","Cybersecurity Laboratory, BV TECH S.p.A., Milan, MI, Italy"],"raw_orcid":"https://orcid.org/0000-0002-6526-554X","affiliations":[{"raw_affiliation_string":"Cybersecurity Laboratory, BV TECH S.p.A., Milan, Italy","institution_ids":[]},{"raw_affiliation_string":"Cybersecurity Laboratory, BV TECH S.p.A., Milan, MI, Italy","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038436210","display_name":"Giuseppe Pirlo","orcid":"https://orcid.org/0000-0002-7305-2210"},"institutions":[{"id":"https://openalex.org/I5561750","display_name":"University of Bari Aldo Moro","ror":"https://ror.org/027ynra39","country_code":"IT","type":"education","lineage":["https://openalex.org/I5561750"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giuseppe Pirlo","raw_affiliation_strings":["Department of Computer Science, University of Bari Aldo Moro, Bari, Italy","Department of Computer Science, University of Bari Aldo Moro, Bari, BA, Italy"],"raw_orcid":"https://orcid.org/0000-0002-7305-2210","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Bari Aldo Moro, Bari, Italy","institution_ids":["https://openalex.org/I5561750"]},{"raw_affiliation_string":"Department of Computer Science, University of Bari Aldo Moro, Bari, BA, Italy","institution_ids":["https://openalex.org/I5561750"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1995,"currency":"USD","value_usd":1995},"apc_paid":{"value":1995,"currency":"USD","value_usd":1995},"fwci":8.1052,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.97311772,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"12","issue":null,"first_page":"107689","last_page":"107703"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9922000169754028,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8109979629516602},{"id":"https://openalex.org/keywords/sql-injection","display_name":"SQL injection","score":0.8106240034103394},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4950098395347595},{"id":"https://openalex.org/keywords/web-server","display_name":"Web server","score":0.43818336725234985},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4177553057670593},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.4177497327327728},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.41328057646751404},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.32142651081085205},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.20250633358955383},{"id":"https://openalex.org/keywords/query-by-example","display_name":"Query by Example","score":0.13666430115699768}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8109979629516602},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.8106240034103394},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4950098395347595},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.43818336725234985},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4177553057670593},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.4177497327327728},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.41328057646751404},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.32142651081085205},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.20250633358955383},{"id":"https://openalex.org/C194222762","wikidata":"https://www.wikidata.org/wiki/Q114486","display_name":"Query by Example","level":4,"score":0.13666430115699768},{"id":"https://openalex.org/C164120249","wikidata":"https://www.wikidata.org/wiki/Q995982","display_name":"Web search query","level":3,"score":0.0},{"id":"https://openalex.org/C97854310","wikidata":"https://www.wikidata.org/wiki/Q19541","display_name":"Search engine","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2024.3438092","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3438092","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:d5fb2aeda43d431eb8aad88664298097","is_oa":true,"landing_page_url":"https://doaj.org/article/d5fb2aeda43d431eb8aad88664298097","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 107689-107703 (2024)","raw_type":"article"},{"id":"pmh:oai:ricerca.uniba.it:11586/512521","is_oa":true,"landing_page_url":"https://hdl.handle.net/11586/512521","pdf_url":null,"source":{"id":"https://openalex.org/S4377196296","display_name":"CINECA IRIS Institutional Research Information System (University of Bari Aldo Moro)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I5561750","host_organization_name":"University of Bari Aldo Moro","host_organization_lineage":["https://openalex.org/I5561750"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3438092","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3438092","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":93,"referenced_works":["https://openalex.org/W1503398984","https://openalex.org/W1962083226","https://openalex.org/W1988790447","https://openalex.org/W2018317991","https://openalex.org/W2029815481","https://openalex.org/W2040318870","https://openalex.org/W2062230687","https://openalex.org/W2089883218","https://openalex.org/W2336235736","https://openalex.org/W2339647006","https://openalex.org/W2736668610","https://openalex.org/W2768183021","https://openalex.org/W2809183419","https://openalex.org/W2810065972","https://openalex.org/W2897659885","https://openalex.org/W2942881102","https://openalex.org/W2946129952","https://openalex.org/W2955182064","https://openalex.org/W2978612193","https://openalex.org/W2981809210","https://openalex.org/W2982302071","https://openalex.org/W2986709913","https://openalex.org/W2999058564","https://openalex.org/W2999097465","https://openalex.org/W3005813464","https://openalex.org/W3005976219","https://openalex.org/W3008025883","https://openalex.org/W3008602940","https://openalex.org/W3010649893","https://openalex.org/W3013330736","https://openalex.org/W3013668423","https://openalex.org/W3021693099","https://openalex.org/W3035999996","https://openalex.org/W3042471545","https://openalex.org/W3084074548","https://openalex.org/W3089016417","https://openalex.org/W3092013020","https://openalex.org/W3095708133","https://openalex.org/W3104241163","https://openalex.org/W3110137362","https://openalex.org/W3110385135","https://openalex.org/W3127240323","https://openalex.org/W3152832433","https://openalex.org/W3152854147","https://openalex.org/W3160160966","https://openalex.org/W3168500738","https://openalex.org/W3168771234","https://openalex.org/W3171382985","https://openalex.org/W3175081627","https://openalex.org/W3178039307","https://openalex.org/W3179751399","https://openalex.org/W3181277865","https://openalex.org/W3183235808","https://openalex.org/W3184859223","https://openalex.org/W3186798288","https://openalex.org/W3188417193","https://openalex.org/W3189611200","https://openalex.org/W3210329055","https://openalex.org/W3212596910","https://openalex.org/W3217411715","https://openalex.org/W4210803164","https://openalex.org/W4211023091","https://openalex.org/W4214829033","https://openalex.org/W4220751473","https://openalex.org/W4280563962","https://openalex.org/W4283211693","https://openalex.org/W4292104156","https://openalex.org/W4295852018","https://openalex.org/W4296746025","https://openalex.org/W4311695093","https://openalex.org/W4312847977","https://openalex.org/W4313561542","https://openalex.org/W4320077543","https://openalex.org/W4320496375","https://openalex.org/W4321061942","https://openalex.org/W4361004367","https://openalex.org/W4365130681","https://openalex.org/W4367624215","https://openalex.org/W4382982141","https://openalex.org/W4383753794","https://openalex.org/W4385452929","https://openalex.org/W4385781832","https://openalex.org/W4387043062","https://openalex.org/W4387677193","https://openalex.org/W4387700587","https://openalex.org/W4388145573","https://openalex.org/W4388185698","https://openalex.org/W4390659426","https://openalex.org/W4392529044","https://openalex.org/W4406746186","https://openalex.org/W6656966300","https://openalex.org/W6783129615","https://openalex.org/W6797422917"],"related_works":["https://openalex.org/W1982746004","https://openalex.org/W2955734438","https://openalex.org/W3184859223","https://openalex.org/W2167752994","https://openalex.org/W2775081089","https://openalex.org/W2504194819","https://openalex.org/W2407701912","https://openalex.org/W2971802583","https://openalex.org/W4256450364","https://openalex.org/W4385706035"],"abstract_inverted_index":{"A":[0],"web":[1,32,147,167,201],"application":[2,33,64,148,172],"is":[3,18,117,124,270],"prone":[4],"to":[5,9,59,92,110,128,145,235],"security":[6,14,112],"threats":[7],"due":[8],"its":[10],"open":[11],"nature.":[12],"The":[13,155,224],"of":[15,22,89,98,103,191,230,242],"these":[16],"platforms":[17],"imperative":[19],"for":[20,150,264],"organizations":[21],"all":[23],"sizes":[24],"because":[25],"they":[26],"store":[27],"sensitive":[28],"information.":[29],"Consequently,":[30],"exploiting":[31],"vulnerabilities":[34,196],"could":[35],"result":[36],"in":[37,71,86,182,239],"large-scale":[38],"data":[39],"breaches":[40],"and":[41,44,169,187,207],"significant":[42],"brand":[43],"financial":[45],"damages.":[46],"SQL":[47,151],"injection":[48],"(SQLi)":[49],"represents":[50],"a":[51,68,104,108,115,139,185,189,199,278],"popular":[52],"attack":[53,75],"vector":[54],"that":[55,141,193,273],"malicious":[56,74],"actors":[57],"use":[58,214],"compromise":[60],"website":[61],"security.":[62],"Web":[63],"firewalls":[65,149],"(WAFs)":[66],"play":[67],"primary":[69],"role":[70],"preventing":[72],"such":[73],"typologies.":[76],"In":[77,119],"the":[78,87,101,122,129,133,165,170,218,233,240,249,254],"recent":[79],"literature,":[80],"several":[81],"advances":[82],"have":[83],"been":[84],"proposed":[85,156],"field":[88],"WAF":[90,105,116,134,186],"enhancement":[91],"prevent":[93],"SQLi":[94,195,209,237,280],"exploitation.":[95],"However,":[96],"many":[97],"them":[99],"test":[100],"effectiveness":[102],"without":[106],"releasing":[107],"patch":[109,123,194],"fix":[111],"flaws":[113],"if":[114],"bypassed.":[118],"other":[120],"cases,":[121],"distributed":[125],"exclusively":[126],"according":[127],"syntax":[130],"specified":[131],"by":[132,198,253,275],"tested.":[135],"This":[136],"paper":[137],"introduces":[138],"framework":[140],"leverages":[142],"PROxy":[143],"Grammar":[144],"Enhance":[146],"Injection":[152],"prevention":[153],"(PROGESI).":[154],"solution":[157],"can":[158,177,205],"act":[159],"as":[160,248],"an":[161],"intermediary":[162],"layer":[163],"between":[164],"targeted":[166],"server":[168],"incoming":[171],"level":[173],"requests.":[174],"Specifically,":[175],"PROGESI":[176],"be":[178],"used":[179,220],"individually":[180],"or":[181],"combination":[183],"with":[184],"includes":[188],"series":[190],"rules":[192,219],"exposed":[197],"specific":[200],"server.":[202],"Furthermore,":[203],"it":[204],"identify":[206,236],"mitigate":[208],"attempts,":[210],"also":[211],"when":[212],"attackers":[213],"mutation":[215],"techniques,":[216],"since":[217],"encompass":[221],"generalization":[222,250,266],"mechanisms.":[223],"experiments":[225],"performed":[226],"revealed":[227],"two":[228],"strengths":[229],"PROGESI:":[231],"(i)":[232],"ability":[234],"even":[238,263],"presence":[241],"server-side":[243],"defense":[244],"mechanisms,":[245],"which":[246,269],"increases":[247],"rate":[251,267],"implemented":[252],"rule":[255],"generation":[256],"algorithm":[257],"increases;":[258],"(ii)":[259],"impressive":[260],"detection":[261],"performance":[262],"low":[265],"values,":[268],"higher":[271],"than":[272],"achieved":[274],"competitors":[276],"using":[277],"state-of-the-art":[279],"dataset.":[281]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":3}],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2024-08-06T00:00:00"}