{"id":"https://openalex.org/W2963314580","doi":"https://doi.org/10.1109/tr.2019.2925415","title":"DIAVA: A Traffic-Based Framework for Detection of SQL Injection Attacks and Vulnerability Analysis of Leaked Data","display_name":"DIAVA: A Traffic-Based Framework for Detection of SQL Injection Attacks and Vulnerability Analysis of Leaked Data","publication_year":2019,"publication_date":"2019-07-24","ids":{"openalex":"https://openalex.org/W2963314580","doi":"https://doi.org/10.1109/tr.2019.2925415","mag":"2963314580"},"language":"en","primary_location":{"id":"doi:10.1109/tr.2019.2925415","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2019.2925415","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101614295","display_name":"Haifeng Gu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]},{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haifeng Gu","raw_affiliation_strings":["Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-5527-9198","affiliations":[{"raw_affiliation_string":"Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100612774","display_name":"Jianning Zhang","orcid":"https://orcid.org/0000-0002-4562-3258"},"institutions":[{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]},{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianning Zhang","raw_affiliation_strings":["Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100365651","display_name":"Tian Liu","orcid":"https://orcid.org/0000-0002-4587-4399"},"institutions":[{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]},{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tian Liu","raw_affiliation_strings":["Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-4587-4399","affiliations":[{"raw_affiliation_string":"Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017425520","display_name":"Ming Hu","orcid":"https://orcid.org/0000-0002-5058-4660"},"institutions":[{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]},{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ming Hu","raw_affiliation_strings":["Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102905745","display_name":"Junlong Zhou","orcid":"https://orcid.org/0000-0002-7734-4077"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junlong Zhou","raw_affiliation_strings":["Department of Computer Science and Technology, Nanjing University of Science and Technology, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-7734-4077","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Nanjing University of Science and Technology, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042163232","display_name":"Tongquan Wei","orcid":"https://orcid.org/0000-0002-7421-1711"},"institutions":[{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]},{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tongquan Wei","raw_affiliation_strings":["Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-7421-1711","affiliations":[{"raw_affiliation_string":"Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I66867065"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025413633","display_name":"Mingsong Chen","orcid":"https://orcid.org/0000-0002-3922-0989"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]},{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]},{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingsong Chen","raw_affiliation_strings":["Shanghai Institute of Intelligent Science and Technology, Tongji University, Shanghai, China","Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-3922-0989","affiliations":[{"raw_affiliation_string":"Shanghai Institute of Intelligent Science and Technology, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]},{"raw_affiliation_string":"Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I66867065"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":9.2995,"has_fulltext":false,"cited_by_count":61,"citation_normalized_percentile":{"value":0.97913476,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"69","issue":"1","first_page":"188","last_page":"202"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sql-injection","display_name":"SQL injection","score":0.9170728921890259},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8199957013130188},{"id":"https://openalex.org/keywords/sql","display_name":"SQL","score":0.6715063452720642},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6543401479721069},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5630983114242554},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5228931307792664},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.505165159702301},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4156153202056885},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.4087381064891815},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3203076422214508},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.18835633993148804},{"id":"https://openalex.org/keywords/query-by-example","display_name":"Query by Example","score":0.13522669672966003},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.13029837608337402},{"id":"https://openalex.org/keywords/search-engine","display_name":"Search engine","score":0.11144500970840454}],"concepts":[{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.9170728921890259},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8199957013130188},{"id":"https://openalex.org/C510870499","wikidata":"https://www.wikidata.org/wiki/Q47607","display_name":"SQL","level":2,"score":0.6715063452720642},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6543401479721069},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5630983114242554},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5228931307792664},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.505165159702301},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4156153202056885},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.4087381064891815},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3203076422214508},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.18835633993148804},{"id":"https://openalex.org/C194222762","wikidata":"https://www.wikidata.org/wiki/Q114486","display_name":"Query by Example","level":4,"score":0.13522669672966003},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13029837608337402},{"id":"https://openalex.org/C97854310","wikidata":"https://www.wikidata.org/wiki/Q19541","display_name":"Search engine","level":2,"score":0.11144500970840454},{"id":"https://openalex.org/C164120249","wikidata":"https://www.wikidata.org/wiki/Q995982","display_name":"Web search query","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tr.2019.2925415","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2019.2925415","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.75}],"awards":[{"id":"https://openalex.org/G2823754234","display_name":"\u4e0d\u786e\u5b9a\u73af\u5883\u4e0b\u4fe1\u606f\u7269\u7406\u7cfb\u7edf\u9ad8\u6548\u53ef\u4fe1\u6784\u9020\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"61872147","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G578633690","display_name":null,"funder_award_id":"BK20180470","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"},{"id":"https://openalex.org/G643847617","display_name":null,"funder_award_id":"2018YFB2101300","funder_id":"https://openalex.org/F4320336026","funder_display_name":"National Key Research and Development Program of China Stem Cell and Translational Research"},{"id":"https://openalex.org/G8382373889","display_name":null,"funder_award_id":"61802185","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320336026","display_name":"National Key Research and Development Program of China Stem Cell and Translational Research","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W72335960","https://openalex.org/W109951691","https://openalex.org/W1505465226","https://openalex.org/W1564722299","https://openalex.org/W1822502243","https://openalex.org/W1962083226","https://openalex.org/W1977367431","https://openalex.org/W1997389706","https://openalex.org/W2004460663","https://openalex.org/W2038879461","https://openalex.org/W2065555413","https://openalex.org/W2095293449","https://openalex.org/W2112962899","https://openalex.org/W2158267769","https://openalex.org/W2164582878","https://openalex.org/W2166381878","https://openalex.org/W2212046922","https://openalex.org/W2339647006","https://openalex.org/W2511947018","https://openalex.org/W2514783878","https://openalex.org/W2592097190","https://openalex.org/W2612901533","https://openalex.org/W2613451960","https://openalex.org/W2810065972","https://openalex.org/W4243607364","https://openalex.org/W6602944243","https://openalex.org/W6604462143","https://openalex.org/W6630065895","https://openalex.org/W6633973073"],"related_works":["https://openalex.org/W3107810407","https://openalex.org/W4298018373","https://openalex.org/W2571113418","https://openalex.org/W4206678297","https://openalex.org/W2359391484","https://openalex.org/W3196457791","https://openalex.org/W2133089983","https://openalex.org/W3202423697","https://openalex.org/W4385682279","https://openalex.org/W2152875642"],"abstract_inverted_index":{"SQL":[0,24,81,144,223],"injection":[1,25],"attack":[2,91,101,189],"(SQLIA)":[3],"is":[4,92],"among":[5,160],"the":[6,100,105,109,139,162,165,171,174,206],"most":[7,49],"common":[8],"security":[9],"threats":[10],"to":[11,35,56,134],"web-based":[12],"services":[13],"that":[14,65,195],"are":[15,46,54,62],"deployed":[16,73],"on":[17,32,78,185],"cloud.":[18],"By":[19,137],"exploiting":[20],"web":[21,42],"software":[22],"vulnerabilities,":[23],"attackers":[26],"can":[27,66,86,130,155,178],"run":[28],"arbitrary":[29],"malicious":[30],"code":[31],"target":[33],"databases":[34],"acquire":[36],"or":[37],"compromise":[38],"sensitive":[39],"data.":[40],"Although":[41],"application":[43],"firewalls":[44],"(WAFs)":[45],"offered":[47],"by":[48,182,222],"cloud":[50],"service":[51],"providers,":[52],"tenants":[53,135],"reluctant":[55],"pay":[57],"for":[58,71],"them,":[59],"since":[60],"there":[61],"few":[63],"approaches":[64],"report":[67],"accurate":[68],"SQLIA":[69,121],"statistics":[70],"their":[72],"services.":[74],"Traditional":[75],"WAFs":[76,201],"focus":[77],"blocking":[79],"suspicious":[80],"requests.":[82],"Few":[83],"of":[84,108,111,143,167,173,208,218],"them":[85],"accurately":[87,156],"decide":[88],"whether":[89],"an":[90],"really":[93],"harmful":[94],"and":[95,123,146,170,210],"quickly":[96,180],"answer":[97],"how":[98],"severe":[99],"is.":[102],"To":[103],"raise":[104],"tenants'":[106],"awareness":[107],"seriousness":[110],"SQLIAs,":[112],"in":[113,202],"this":[114],"paper,":[115],"we":[116],"introduce":[117],"a":[118],"novel":[119],"traffic-based":[120],"detection":[122],"vulnerability":[124,216],"analysis":[125,190],"framework":[126],"named":[127],"DIAVA,":[128],"which":[129],"proactively":[131],"send":[132],"warnings":[133],"promptly.":[136],"analyzing":[138],"bidirectional":[140],"network":[141],"traffic":[142],"operations":[145],"applying":[147],"our":[148],"proposed":[149],"multilevel":[150],"regular":[151],"expression":[152],"model,":[153],"DIAVA":[154,183,196],"identify":[157],"successful":[158],"SQLIAs":[159,169],"all":[161],"suspects.":[163],"Meanwhile,":[164],"severity":[166],"such":[168],"vulnerabilities":[172],"corresponding":[175],"leaked":[176,219],"data":[177,220],"be":[179],"evaluated":[181],"based":[184],"its":[186],"GPU-based":[187],"dictionary":[188],"engine.":[191],"Experimental":[192],"results":[193],"show":[194],"not":[197],"only":[198],"outperforms":[199],"state-of-the-art":[200],"detecting":[203],"SQLAs":[204],"from":[205],"perspectives":[207],"precision":[209],"recall,":[211],"but":[212],"also":[213],"enables":[214],"real-time":[215],"evaluation":[217],"caused":[221],"injection.":[224]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":15},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":6}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}