MétaCan
Menu
Back to cohort

An Evolutionary Algorithm for Adversarial SQL Injection Attack Generation

2023· article· en· W4388115665 on OpenAlex

Why this work is in the frame

A frame that forgets how it found something cannot be audited. These are the routes that admitted this work.

affAt least one author lists a Canadian institution in the pinned OpenAlex snapshot.

Bibliographic record

Venuenot available
Typearticle
Languageen
FieldComputer Science
TopicAdversarial Robustness in Machine Learning
Canadian institutionsSimon Fraser UniversityYork University
Fundersnot available
KeywordsSQL injectionAdversarial systemComputer scienceCross-site scriptingScripting languageVulnerability (computing)Adversarial machine learningSQLMachine learningArtificial intelligenceWeb application securitySoftware engineeringComputer securityDatabaseWeb serviceWorld Wide WebQuery by ExampleProgramming languageWeb developmentSearch engine

Abstract

fetched live from OpenAlex

Web application security poses ongoing challenges for organizations, and researchers have increasingly turned to machine and deep learning techniques to address vulnerabilities such as SQL injection and Cross Site Scripting. While these studies have made notable progress, the vulnerability to adversarial attacks remains a significant challenge. In this work, we aim to explore the impact of adversarial examples on machine and deep learning applications for detecting web vulnerabilities. We propose an evolutionary algorithm to create effective adversarial samples for bypassing various detection systems by iterative exploration of the search space. The effectiveness of our proposed approach is validated through rigorous testing on different diverse SQL injection detection systems.

Fetched live from OpenAlex and de-inverted. Abstracts are not stored in this database: the inverted indexes are 8.6 GB of the frame’s 9.3 GB of text, and the host has 13 GB free.

Full frame distilled prediction

Teacher imitation

Not calibrated prevalence, not ground truth. Human validation pending. Learned from the 10,348 direct Codex labels and 10,348 direct Gemma labels. Candidate is the union of thresholded teacher heads; consensus is their intersection. These outputs are machine_predicted_unvalidated and are not human labels or direct frontier model labels.

metaresearch head score (Codex)0.000
metaresearch head score (Gemma)0.000
Version: codex-gemma-dda1882f352aValidation status: machine_predicted_unvalidated
Candidate categoriesnone
Consensus categoriesnone
DomainCandidate signal: none · Consensus signal: none
Study designCandidate signal: Simulation or modeling · Consensus signal: Simulation or modeling
GenreCandidate signal: Methods · Consensus signal: Methods
Teacher disagreement score0.373
Threshold uncertainty score0.500

Codex and Gemma teacher scores by category

CategoryCodexGemma
Metaresearch0.0000.000
Meta-epidemiology (narrow)0.0000.000
Meta-epidemiology (broad)0.0000.000
Bibliometrics0.0000.001
Science and technology studies0.0000.000
Scholarly communication0.0000.001
Open science0.0000.000
Research integrity0.0000.000
Insufficient payload (model declined to judge)0.0000.000

Machine scores (provisional)

The two teacher heads of the student model, read on this work. A score orders the frame for review; it never asserts a category, and the validation status ships verbatim with every row.

Baseline scores from an immature model (maturity gate not passed, 7 training rounds). Scores rank; they never assert a category.

Opus teacher head0.039
GPT teacher head0.322
Teacher spread0.283 · how far apart the two teachers sit on this one work
Validation statusscore_only:v0-immature-baseline · verbatim from the scoring run: score_only means the number may rank works, and no category label ships from it