{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T23:15:18Z","timestamp":1778109318843,"version":"3.51.4"},"publisher-location":"Cham","reference-count":22,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032174420","type":"print"},{"value":"9783032174437","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-17443-7_14","type":"book-chapter","created":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T22:55:35Z","timestamp":1778108135000},"page":"232-245","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Machine Learning-Based Web Application Firewalls for\u00a0SQL Injection and\u00a0XSS Prevention"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4931-1251","authenticated-orcid":false,"given":"Alin","family":"Zamfiroiu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-7743-3726","authenticated-orcid":false,"given":"George","family":"Orz\u0103nescu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-1798-716X","authenticated-orcid":false,"given":"Joe","family":"Francom","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5283-0426","authenticated-orcid":false,"given":"Noaman Syed","family":"Ali","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,5,1]]},"reference":[{"issue":"2","key":"14_CR1","doi-asserted-by":"publisher","first-page":"219","DOI":"10.26650\/acin.1039042","volume":"6","author":"S Toprak","year":"2022","unstructured":"Toprak, S., Yavuz, A.G.: Web application firewall based on anomaly detection using deep learning. Acta Infologica 6(2), 219\u2013244 (2022)","journal-title":"Acta Infologica"},{"issue":"2","key":"14_CR2","first-page":"42","volume":"2","author":"SM Muneer","year":"2023","unstructured":"Muneer, S.M., Alvi, M.B., Farrakh, A.: Cyber security event detection using machine learning technique. Int. J. Comput. Innovative Sci. 2(2), 42\u201346 (2023)","journal-title":"Int. J. Comput. Innovative Sci."},{"key":"14_CR3","doi-asserted-by":"publisher","first-page":"15591","DOI":"10.1007\/s13369-024-09916-4","volume":"50","author":"R Bak\u0131r","year":"2025","unstructured":"Bak\u0131r, R.: UniEmbed: a novel approach to detect XSS and SQL injection attacks leveraging multiple feature fusion with machine learning techniques. Arab. J. Sci. Eng. 50, 15591\u201315604 (2025). https:\/\/doi.org\/10.1007\/s13369-024-09916-4","journal-title":"Arab. J. Sci. Eng."},{"key":"14_CR4","doi-asserted-by":"publisher","unstructured":"Babaey, V., Ravindran, A.: GenSQLi: a generative artificial intelligence framework for automatically securing web application firewalls against structured query language injection attacks. Future Internet 17, 8 (2024). https:\/\/doi.org\/10.3390\/fi17010008","DOI":"10.3390\/fi17010008"},{"key":"14_CR5","doi-asserted-by":"publisher","unstructured":"Floris, G., et al.: ModSec-AdvLearn: countering adversarial SQL injections with robust machine learning. IEEE Trans. Inf. Forensics Secur. 20, 6693\u20136705 (2025). https:\/\/doi.org\/10.1109\/TIFS.2025.3583234","DOI":"10.1109\/TIFS.2025.3583234"},{"key":"14_CR6","doi-asserted-by":"publisher","unstructured":"Paul, A., Sharma, V., Olukoya, O.: SQL injection attack: detection, prioritization & prevention. J. Inf. Secur. Appl. 85, 103871 (2024). https:\/\/doi.org\/10.1016\/j.jisa.2024.103871","DOI":"10.1016\/j.jisa.2024.103871"},{"key":"14_CR7","doi-asserted-by":"publisher","unstructured":"Shaheed, A., Kurdy, M.H.D.B.: Web application firewall using machine learning and features engineering. Secur. Commun. Netw. 2022, 5280158 (2022). https:\/\/doi.org\/10.1155\/2022\/5280158","DOI":"10.1155\/2022\/5280158"},{"key":"14_CR8","doi-asserted-by":"publisher","unstructured":"Dawadi, B.R., Adhikari, B., Srivastava, D.K.: Deep learning technique-enabled web application firewall for the detection of web attacks. Sensors (Basel) 23, 2073 (2023). https:\/\/doi.org\/10.3390\/s23042073","DOI":"10.3390\/s23042073"},{"key":"14_CR9","first-page":"54","volume":"11","author":"S Dhote","year":"2024","unstructured":"Dhote, S., Singh, S., Student, A., Raigar, D.: A comprehensive survey of ML-based WAFs with signature and anomaly detection. Strad Res. 11, 54\u201360 (2024)","journal-title":"Strad Res."},{"key":"14_CR10","unstructured":"Bocharov, A.: Making WAF ML models go brrr: saving decades of processing time. Cloudflare Blog (2024). https:\/\/blog.cloudflare.com\/making-waf-ai-models-go-brr\/. Accessed 10 Apr 2025"},{"key":"14_CR11","unstructured":"Shah, S.S.H.: SQL injection dataset (2021). https:\/\/www.kaggle.com\/datasets\/syedsaqlainhussain\/sql-injection-dataset. Accessed Sept 2025"},{"key":"14_CR12","unstructured":"Mohamed, I.: EDA \u2013 SQL Injection Dataset. https:\/\/www.kaggle.com\/code\/iniestamoh\/eda-sql-injection-dataset. Accessed Sept 2025"},{"key":"14_CR13","unstructured":"Shah, S.S.H.: Cross site scripting XSS dataset for deep learning (2020). https:\/\/www.kaggle.com\/datasets\/syedsaqlainhussain\/cross-site-scripting-xss-dataset-for-deep-learning. Accessed Sept 2025"},{"key":"14_CR14","unstructured":"Gim\u00e9nez, C.T., Villegas, A.P., Mara\u00f1\u00f3n, G.\u00c1.: HTTP data set CSIC 2010. Information Security Institute of CSIC (Spanish Research National Council), 64 (2010)"},{"key":"14_CR15","doi-asserted-by":"publisher","unstructured":"Shees, A., Tariq, M., Sarwat, A.I.: Cybersecurity in smart grids: detecting false data injection attacks utilizing supervised machine learning techniques. Energies 17, 5870 (2024). https:\/\/doi.org\/10.3390\/en17235870","DOI":"10.3390\/en17235870"},{"key":"14_CR16","doi-asserted-by":"publisher","unstructured":"Peralta-Garcia, E., Quevedo-Monsalbe, J., Tuesta-Monteza, V., Arcila-Diaz, J.: Detecting structured query language injections in web microservices using machine learning. Informatics 11, 15 (2024). https:\/\/doi.org\/10.3390\/informatics11020015","DOI":"10.3390\/informatics11020015"},{"key":"14_CR17","doi-asserted-by":"publisher","unstructured":"Uppara, V., Iqbal, A., Vishal, P., Vinay, M.V., Sarasvathi, V.: URL classification with intrusion detection system. In: Arai, K. (ed.) Intelligent Systems and Applications, pp. 284\u2013300. Springer, Cham (2024). https:\/\/doi.org\/10.1007\/978-3-031-47721-8_19","DOI":"10.1007\/978-3-031-47721-8_19"},{"issue":"1","key":"14_CR18","first-page":"20","volume":"24","author":"FMM Mokbal","year":"2022","unstructured":"Mokbal, F.M.M., Wang, D., Wang, X.: Detect cross-site scripting attacks using average word embedding and support vector machine. Int. J. Netw. Secur. 24(1), 20\u201328 (2022)","journal-title":"Int. J. Netw. Secur."},{"key":"14_CR19","unstructured":"XSSer (2025). https:\/\/xsser.03c8.net\/. Accessed Sept 2025"},{"key":"14_CR20","unstructured":"SQLMap (2025). https:\/\/github.com\/sqlmapproject\/sqlmap\/wiki\/Techniques. Accessed Sept 2025"},{"key":"14_CR21","doi-asserted-by":"publisher","unstructured":"Reddy, S.S., Nishoak, K., Shreya, J.L., Reddy, Y.V., Venkanna, U.: A P4-based adversarial attack mitigation on machine learning models in data plane devices. J. Netw. Syst. Manage. 32, 5 (2023). https:\/\/doi.org\/10.1007\/s10922-023-09777-6","DOI":"10.1007\/s10922-023-09777-6"},{"key":"14_CR22","doi-asserted-by":"publisher","unstructured":"Saidi, P., Dasarathy, G., Berisha, V.: Unraveling overoptimism and publication bias in ML-driven science. Patterns (N Y) 6, 101185 (2025). https:\/\/doi.org\/10.1016\/j.patter.2025.101185","DOI":"10.1016\/j.patter.2025.101185"}],"container-title":["Lecture Notes in Computer Science","Innovative Security Solutions for Information Technology and Communications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-17443-7_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T22:55:37Z","timestamp":1778108137000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-17443-7_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032174420","9783032174437"],"references-count":22,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-17443-7_14","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"1 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SecITC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information Technology and Communications Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Bucharest","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Romania","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 November 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 November 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"itc2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/secitc.eu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}