Title | NoSQL Injection Detection Using Supervised Text Classification |
Publication Type | Conference Paper |
Year of Publication | 2022 |
Authors | Praveen, Sivakami, Dcouth, Alysha, Mahesh, A S |
Conference Name | 2022 2nd International Conference on Intelligent Technologies (CONIT) |
Date Published | jun |
Keywords | CassandraDB, Computational modeling, Couchbase, CouchDB, Human Behavior, machine learning, Metrics, MongoDB, natural language processing, NoSQL databases, NoSQL injection, policy-based governance, privacy, pubcrawl, resilience, Resiliency, SQL Injection, SQL injection detection, supervised learning, text categorization |
Abstract | For a long time, SQL injection has been considered one of the most serious security threats. NoSQL databases are becoming increasingly popular as big data and cloud computing technologies progress. NoSQL injection attacks are designed to take advantage of applications that employ NoSQL databases. NoSQL injections can be particularly harmful because they allow unrestricted code execution. In this paper we use supervised learning and natural language processing to construct a model to detect NoSQL injections. Our model is designed to work with MongoDB, CouchDB, CassandraDB, and Couchbase queries. Our model has achieved an F1 score of 0.95 as established by 10-fold cross validation. |
DOI | 10.1109/CONIT55038.2022.9848017 |
Citation Key | praveen_nosql_2022 |