{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T16:19:13Z","timestamp":1743092353838,"version":"3.40.3"},"publisher-location":"Cham","reference-count":29,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319122854"},{"type":"electronic","value":"9783319122861"}],"license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-319-12286-1_38","type":"book-chapter","created":{"date-parts":[[2014,9,30]],"date-time":"2014-09-30T10:20:04Z","timestamp":1412072404000},"page":"371-380","source":"Crossref","is-referenced-by-count":1,"title":["Towards SQL Injection Attacks Detection Mechanism Using Parse Tree"],"prefix":"10.1007","author":[{"given":"Tsu-Yang","family":"Wu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jeng-Shyang","family":"Pan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chien-Ming","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chun-Wei","family":"Lin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"38_CR1","unstructured":"http:\/\/www.gotocode.com"},{"issue":"2","key":"38_CR2","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1145\/1698750.1698754","volume":"13","author":"P. Bisht","year":"2010","unstructured":"Bisht, P., Madhusudan, P., Venkatakrishnan, V.: Candid: Dynamic candidate evaluations for automatic prevention of sql injection attacks. ACM Transactions on Information and System Security (TISSEC)\u00a013(2), 14 (2010)","journal-title":"ACM Transactions on Information and System Security (TISSEC)"},{"key":"38_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"292","DOI":"10.1007\/978-3-540-24852-1_21","volume-title":"Applied Cryptography and Network Security","author":"S.W. Boyd","year":"2004","unstructured":"Boyd, S.W., Keromytis, A.D.: Sqlrand: Preventing sql injection attacks. In: Jakobsson, M., Yung, M., Zhou, J. (eds.) ACNS 2004. LNCS, vol.\u00a03089, pp. 292\u2013302. Springer, Heidelberg (2004)"},{"key":"38_CR4","doi-asserted-by":"crossref","unstructured":"Bravenboer, M., Dolstra, E., Visser, E.: Preventing injection attacks with syntax embeddings. In: Proceedings of the 6th International Conference on Generative Programming and Component Engineering, pp. 3\u201312. ACM (2007)","DOI":"10.1145\/1289971.1289975"},{"key":"38_CR5","doi-asserted-by":"crossref","unstructured":"Buehrer, G., Weide, B.W., Sivilotti, P.A.: Using parse tree validation to prevent sql injection attacks. In: Proceedings of the 5th International Workshop on Software Engineering and Middleware, pp. 106\u2013113. ACM (2005)","DOI":"10.1145\/1108473.1108496"},{"key":"38_CR6","doi-asserted-by":"crossref","unstructured":"Chen, C.M., Zheng, X., Wu, T.Y.: A complete hierarchical key management scheme for heterogeneous wireless sensor networks. The Scientific World Journal\u00a02014, Article ID 816549, 13 pages (2014)","DOI":"10.1155\/2014\/816549"},{"key":"38_CR7","unstructured":"Christey, S., Martin, R.A.: Vulnerability type distributions in cve (2007)"},{"key":"38_CR8","unstructured":"Clarke, J.: SQL injection attacks and defense. Elsevier (2012)"},{"key":"38_CR9","unstructured":"Dhamankar, R., Dausin, M., Eisenbarth, M., King, J., Kandek, W., Ullrich, J., Skoudis, E., Lee, R.: The top cyber security risks. TippingPoint, Qualys, the Internet Storm Center and the SANS Institute faculty. Tech. Rep. (2009)"},{"key":"38_CR10","doi-asserted-by":"crossref","unstructured":"Fu, X., Lu, X., Peltsverger, B., Chen, S., Qian, K., Tao, L.: A static analysis framework for detecting sql injection vulnerabilities. In: Proceedings of the 31st Annual International Computer Software and Applications Conference (COMPSAC 2007), vol.\u00a01, pp. 87\u201396. IEEE (2007)","DOI":"10.1109\/COMPSAC.2007.43"},{"issue":"2","key":"38_CR11","first-page":"99","volume":"4","author":"C. Guo","year":"2013","unstructured":"Guo, C., Chang, C.C., Sun, C.Y.: Chaotic maps-based mutual authentication and key agreement using smart cards for wireless communications. Journal of Information Hiding and Multimedia Signal Processing\u00a04(2), 99\u2013109 (2013)","journal-title":"Journal of Information Hiding and Multimedia Signal Processing"},{"key":"38_CR12","unstructured":"Halfond, W., Viegas, J., Orso, A.: A classification of sql-injection attacks and countermeasures. In: Proceedings of the IEEE International Symposium on Secure Software Engineering, Arlington, VA, USA, pp. 13\u201315 (2006)"},{"key":"38_CR13","doi-asserted-by":"crossref","unstructured":"Halfond, W.G., Orso, A.: Amnesia: analysis and monitoring for neutralizing sql-injection attacks. In: Proceedings of the 20th IEEE\/ACM International Conference on Automated Software Engineering, pp. 174\u2013183. ACM (2005)","DOI":"10.1145\/1101908.1101935"},{"key":"38_CR14","doi-asserted-by":"crossref","unstructured":"Halfond, W.G., Orso, A.: Preventing sql injection attacks using amnesia. In: Proceedings of the 28th International Conference on Software Engineering, pp. 795\u2013798. ACM (2006)","DOI":"10.1145\/1134285.1134416"},{"key":"38_CR15","doi-asserted-by":"crossref","unstructured":"Halfond, W.G., Orso, A., Manolios, P.: Using positive tainting and syntax-aware evaluation to counter sql injection attacks. In: Proceedings of the 14th ACM SIGSOFT International Symposium on Foundations of Software Engineering, pp. 175\u2013185. ACM (2006)","DOI":"10.1145\/1181775.1181797"},{"issue":"1","key":"38_CR16","doi-asserted-by":"publisher","first-page":"65","DOI":"10.1109\/TSE.2007.70748","volume":"34","author":"W.G. Halfond","year":"2008","unstructured":"Halfond, W.G., Orso, A., Manolios, P.: Wasp: Protecting web applications using positive tainting and syntax-aware evaluation. IEEE Transactions on Software Engineering\u00a034(1), 65\u201381 (2008)","journal-title":"IEEE Transactions on Software Engineering"},{"issue":"5","key":"38_CR17","doi-asserted-by":"publisher","first-page":"2345","DOI":"10.1016\/j.eswa.2013.09.032","volume":"41","author":"B.Z. He","year":"2014","unstructured":"He, B.Z., Chen, C.M., Su, Y.P., Sun, H.M.: A defence scheme against identity theft attack based on multiple social networks. Expert Systems with Applications\u00a041(5), 2345\u20132352 (2014)","journal-title":"Expert Systems with Applications"},{"key":"38_CR18","doi-asserted-by":"crossref","unstructured":"Huang, Y.W., Huang, S.K., Lin, T.P., Tsai, C.H.: Web application security assessment by fault injection and behavior monitoring. In: Proceedings of the 12th International Conference on World Wide Web, pp. 148\u2013159. ACM (2003)","DOI":"10.1145\/775152.775174"},{"key":"38_CR19","doi-asserted-by":"crossref","unstructured":"Komiya, R., Paik, I., Hisada, M.: Classification of malicious web code by machine learning. In: Proceedings of the 3rd International Conference on Awareness Science and Technology (iCAST 2011), pp. 406\u2013411. IEEE (2011)","DOI":"10.1109\/ICAwST.2011.6163109"},{"key":"38_CR20","doi-asserted-by":"crossref","unstructured":"Kosuga, Y., Kernel, K., Hanaoka, M., Hishiyama, M., Takahama, Y.: Sania: Syntactic and semantic analysis for automated testing against sql injection. In: 23th Annual Computer Security Applications Conference (ACSAC 2007), pp. 107\u2013117. IEEE (2007)","DOI":"10.1109\/ACSAC.2007.20"},{"key":"38_CR21","doi-asserted-by":"crossref","unstructured":"Lam, M.S., Whaley, J., Livshits, V.B., Martin, M.C., Avots, D., Carbin, M., Unkel, C.: Context-sensitive program analysis as database queries. In: Proceedings of the 24th ACM SIGMOD-SIGACT-SIGART Symposium on Principles of Database Systems, pp. 1\u201312. ACM (2005)","DOI":"10.1145\/1065167.1065169"},{"issue":"1","key":"38_CR22","doi-asserted-by":"publisher","first-page":"58","DOI":"10.1016\/j.mcm.2011.01.050","volume":"55","author":"I. Lee","year":"2012","unstructured":"Lee, I., Jeong, S., Yeo, S., Moon, J.: A novel method for sql injection attack detection based on removing sql query attribute values. Mathematical and Computer Modelling\u00a055(1), 58\u201368 (2012)","journal-title":"Mathematical and Computer Modelling"},{"issue":"4","key":"38_CR23","first-page":"201","volume":"4","author":"C.W. Lin","year":"2013","unstructured":"Lin, C.W., Hong, T.P., Chang, C.C., Wang, S.L.: A greedy-based approach for hiding sensitive itemsets by transaction insertion. Journal of Information Hiding and Multimedia Signal Processing\u00a04(4), 201\u2013227 (2013)","journal-title":"Journal of Information Hiding and Multimedia Signal Processing"},{"key":"38_CR24","doi-asserted-by":"crossref","unstructured":"Lin, C.W., Hong, T.P., Hsu, H.C.: Reducing side effects of hiding sensitive itemsets in privacy preserving data mining. The Scientific World Journal 2014, Article ID 235837, 12 pages (2014)","DOI":"10.1155\/2014\/235837"},{"key":"38_CR25","doi-asserted-by":"crossref","unstructured":"McClure, R.A., Kruger, I.H.: Sql dom: compile time checking of dynamic sql statements. In: Proceedings of the 27th International Conference on Software Engineering (ICSE 2005), pp. 88\u201396. IEEE (2005)","DOI":"10.1145\/1062455.1062487"},{"issue":"3","key":"38_CR26","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1016\/j.cose.2008.09.005","volume":"28","author":"D. Mitropoulos","year":"2009","unstructured":"Mitropoulos, D., Spinellis, D.: Sdriver: Location-specific signatures prevent sql injection attacks. Computers & Security\u00a028(3), 121\u2013129 (2009)","journal-title":"Computers & Security"},{"key":"38_CR27","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"123","DOI":"10.1007\/11506881_8","volume-title":"Intrusion and Malware Detection and Vulnerability Assessment","author":"F. Valeur","year":"2005","unstructured":"Valeur, F., Mutz, D., Vigna, G.: A learning-based approach to the detection of sql attacks. In: Julisch, K., Kruegel, C. (eds.) DIMVA 2005. LNCS, vol.\u00a03548, pp. 123\u2013140. Springer, Heidelberg (2005)"},{"issue":"3","key":"38_CR28","first-page":"240","volume":"3","author":"T.Y. Wu","year":"2012","unstructured":"Wu, T.Y., Tsai, T.T., Tseng, Y.M.: A revocable id-based signcryption scheme. Journal of Information Hiding and Multimedia Signal Processing\u00a03(3), 240\u2013251 (2012)","journal-title":"Journal of Information Hiding and Multimedia Signal Processing"},{"key":"38_CR29","doi-asserted-by":"crossref","unstructured":"Wu, T.Y., Tsai, T.T., Tseng, Y.M.: A provably secure revocable id-based authenticated group key exchange protocol with identifying malicious participants. The Scientific World Journal 2014, Article ID 367264, 10 pages (2014)","DOI":"10.1155\/2014\/367264"}],"container-title":["Advances in Intelligent Systems and Computing","Genetic and Evolutionary Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-12286-1_38","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,21]],"date-time":"2023-01-21T03:43:10Z","timestamp":1674272590000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-12286-1_38"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783319122854","9783319122861"],"references-count":29,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-12286-1_38","relation":{},"ISSN":["2194-5357","2194-5365"],"issn-type":[{"type":"print","value":"2194-5357"},{"type":"electronic","value":"2194-5365"}],"subject":[],"published":{"date-parts":[[2015]]}}}