SQL INJECTION PREDICTION USING MACHINE LEARNING
Abstract
The web is currently the most reliable and popular form of commercial and personal
communication. On the web, users load millions of gigabytes of data every day through a variety of routes, and
user input might be malevolent. As a result, security becomes a crucial component of web applications. Due to
their accessibility, they are vulnerable to several flaws that, if ignored, might be harmful. These gaps are used by
the attackers to engage in a variety of illicit operations that allow them to get unauthorized access. One such
attack that is simple to carry out but challenging to detect due to its various forms and channels is SQL Injection.
This might lead to theft, a data breach, or property loss. The suggested classifier combines a role-based access
control system for detection with the Naive Bayes machine learning method. On the basis of test cases drawn
from the three SQLIA attacks comments, union, and tautology the suggested model is put to the test.