A Comprehensive Exploration and Evaluation of Supervised Machine Learning Algorithms for Detecting SQL Injection Attack on Web Applications

Structure Query Language Injection is one of threats to the web applications. SQL Injection attack compromise confidentiality, integrity and availability of data in the database. By implementing SQL Injection, attacker gain full control on the database of the application, ultimately on overall web application. Web applications that do not appropriately validate the user’s input will result in vulnerable to SQL Injection attack.SQL Injection attack occurs when attacker is successful to insert ‘malicious query’ through the user’s input and it executed on the backend database. This paper describes typical SQL Injection attack, Experimental setup, Machine learning approach for detection of SQL Injection attack, Analysis of various classifiers.