ASE 2019 (series) / Student Research Competition /
A Machine Learning based Approach to Identify SQL Injection Vulnerabilities
Tue 12 Nov 2019 15:20 - 16:00 at Kensington Ballroom - Poster Session: Student Research Competition
Wed 13 Nov 2019 14:25 - 14:40 at South Park - Student Research Competition - Selected Presentations (Undergraduate) Chair(s): Jin L.C. Guo, Jie M. Zhang
Wed 13 Nov 2019 14:25 - 14:40 at South Park - Student Research Competition - Selected Presentations (Undergraduate) Chair(s): Jin L.C. Guo, Jie M. Zhang
This paper presents a machine learning classifier designed to identify SQL injection vulnerabilities in PHP code. Both classical and deep learning based machine learning algorithms were used to train and evaluate classifier models using input validation and sanitization features extracted from source code files. On ten-fold cross validations a model trained using Convolutional Neural Network(CNN) achieved the highest precision (95.4%), while a model based on Multilayer Perceptron (MLP) achieved the highest recall (63.7%) and the highest f-measure (0.746).
Tue 12 NovDisplayed time zone: Tijuana, Baja California change
Tue 12 Nov
Displayed time zone: Tijuana, Baja California change
Wed 13 NovDisplayed time zone: Tijuana, Baja California change
Wed 13 Nov
Displayed time zone: Tijuana, Baja California change
13:40 - 15:20 | Student Research Competition - Selected Presentations (Undergraduate)Student Research Competition at South Park Chair(s): Jin L.C. Guo McGill University, Jie M. Zhang University College London, UK | ||
13:40 15m | Crowdsourced Report Generation via Bug Screenshot Understanding Student Research Competition Shengcheng Yu Nanjing University, China File Attached | ||
13:55 15m | Towards Comprehensible Representation of Controllers using Machine Learning Student Research Competition Gargi Balasubramaniam Birla Institute of Technology and Science, Pilani, K K Birla Goa Campus File Attached | ||
14:10 15m | Empirical Study of Python Call Graph Student Research Competition Li Yu Nanjing University | ||
14:25 15m | A Machine Learning based Approach to Identify SQL Injection Vulnerabilities Student Research Competition Kevin Zhang Wayne State University | ||
14:40 15m | Boosting Neural Commit Message Generation with Code Semantic Analysis Student Research Competition Shuyao Jiang Fudan University |