{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,27]],"date-time":"2026-10-27T15:21:45Z","timestamp":1793114505144,"version":"4.5.0"},"reference-count":49,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2019,2,7]],"date-time":"2019-02-07T00:00:00Z","timestamp":1549497600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Ambient Intell Human Comput"],"published-print":{"date-parts":[[2020,1]]},"DOI":"10.1007\/s12652-019-01235-z","type":"journal-article","created":{"date-parts":[[2019,2,7]],"date-time":"2019-02-07T10:02:46Z","timestamp":1549533766000},"page":"249-266","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":53,"title":["An algorithm for detecting SQL injection vulnerability using black-box testing"],"prefix":"10.1007","volume":"11","author":[{"given":"Muhammad Saidu","family":"Aliero","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Imran","family":"Ghani","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3045-8402","authenticated-orcid":false,"given":"Kashif Naseer","family":"Qureshi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mohd Fo\u2019ad","family":"Rohani","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,2,7]]},"reference":[{"key":"1235_CR1","unstructured":"Acunetix (2013) Accunetix vulnerability scanner"},{"key":"1235_CR2","doi-asserted-by":"crossref","unstructured":"Agosta G, Barenghi A, Parata A, Pelosi G (2012) Automated security analysis of dynamic web applications through symbolic code execution. In: Information Technology: new generations (ITNG), 2012 ninth international conference on, IEEE","DOI":"10.1109\/ITNG.2012.167"},{"issue":"13","key":"1235_CR3","first-page":"49","volume":"77","author":"MS Aliero","year":"2015","unstructured":"Aliero MS, Ghani I, Zainudden S, Khan MM, Bello M (2015) Review on SQL injection protection methods and tools. Jurnal Teknologi 77(13):49\u201366","journal-title":"Jurnal Teknologi"},{"issue":"5","key":"1235_CR4","doi-asserted-by":"publisher","first-page":"649","DOI":"10.1007\/s12652-015-0308-5","volume":"7","author":"F AlShahwan","year":"2016","unstructured":"AlShahwan F, Faisal M, Ansa G (2016) Security framework for RESTful mobile cloud computing Web services. J Ambient Intell Hum Comput 7(5):649\u2013659","journal-title":"J Ambient Intell Hum Comput"},{"key":"1235_CR5","doi-asserted-by":"crossref","unstructured":"Antunes N, Vieira M (2009) Detecting SQL injection vulnerabilities in web services. In: Dependable computing, 2009. LADC\u201909. Fourth Latin-American symposium on, IEEE","DOI":"10.1109\/LADC.2009.21"},{"key":"1235_CR6","doi-asserted-by":"crossref","unstructured":"Antunes N, Vieira M (2010) Benchmarking vulnerability detection tools for web services. In: Web services (ICWS), 2010 IEEE international conference on, IEEE","DOI":"10.1109\/ICWS.2010.76"},{"key":"1235_CR7","doi-asserted-by":"crossref","unstructured":"Antunes N, Vieira M (2011) Enhancing penetration testing with attack signatures and interface monitoring for the detection of injection vulnerabilities in web services. In: Services computing (SCC), 2011 IEEE international conference on, IEEE","DOI":"10.1109\/SCC.2011.67"},{"key":"1235_CR8","doi-asserted-by":"crossref","unstructured":"Antunes N, Vieira M (2012) Evaluating and improving penetration testing in web services. In: Software reliability engineering (ISSRE), 2012 IEEE 23rd international symposium on, IEEE","DOI":"10.1109\/ISSRE.2012.26"},{"issue":"2","key":"1235_CR9","doi-asserted-by":"publisher","first-page":"269","DOI":"10.1109\/TSC.2014.2310221","volume":"8","author":"N Antunes","year":"2015","unstructured":"Antunes N, Vieira M (2015) Assessing and comparing vulnerability detection tools for web services: Benchmarking approach and examples. IEEE Trans Serv Comput 8(2):269\u2013283","journal-title":"IEEE Trans Serv Comput"},{"key":"1235_CR10","doi-asserted-by":"crossref","unstructured":"Appelt D, Nguyen CD, Briand LC, Alshahwan N (2014) Automated testing for SQL injection vulnerabilities: an input mutation approach. In: Proceedings of the 2014 international symposium on software testing and analysis, ACM","DOI":"10.1145\/2610384.2610403"},{"key":"1235_CR11","doi-asserted-by":"crossref","unstructured":"Bau J, Bursztein E, Gupta D, Mitchell J (2010) State of the art: automated black-box web application vulnerability testing. In: Security and privacy (SP), 2010 IEEE symposium on, IEEE","DOI":"10.1109\/SP.2010.27"},{"key":"1235_CR12","doi-asserted-by":"crossref","unstructured":"Chen J-M, Wu C-L (2010) An automated vulnerability scanner for injection attack based on injection point. In: Computer symposium (ICS), 2010 international, IEEE","DOI":"10.1109\/COMPSYM.2010.5685537"},{"issue":"9","key":"1235_CR13","first-page":"967","volume":"5","author":"EH Cheon","year":"2013","unstructured":"Cheon EH, Huang Z, Lee YS (2013) Preventing SQL injection attack based on machine learning. Int J Adv Comput Technol 5(9):967\u2013974","journal-title":"Int J Adv Comput Technol"},{"issue":"3","key":"1235_CR14","doi-asserted-by":"publisher","first-page":"e0117180","DOI":"10.1371\/journal.pone.0117180","volume":"10","author":"Y-C Cho","year":"2015","unstructured":"Cho Y-C, Pan J-Y (2015) Design and implementation of website information disclosure assessment system. PloS One 10(3):e0117180","journal-title":"PloS One"},{"key":"1235_CR15","doi-asserted-by":"crossref","unstructured":"Ciampa A, Visaggio CA, Di Penta M (2010) A heuristic-based approach for detecting SQL-injection vulnerabilities in Web applications. In: Proceedings of the 2010 ICSE workshop on software engineering for secure systems, ACM","DOI":"10.1145\/1809100.1809107"},{"key":"1235_CR16","doi-asserted-by":"crossref","unstructured":"Djuric Z (2013) A black-box testing tool for detecting SQL injection vulnerabilities. In: Informatics and applications (ICIA), 2013 second international conference on, IEEE","DOI":"10.1109\/ICoIA.2013.6650259"},{"key":"1235_CR17","unstructured":"Hassan M, Sarker K, Biswas S, Sharif M (2017) Detection of Wordpress content injection vulnerability. arXiv:1711.02447"},{"key":"1235_CR18","doi-asserted-by":"crossref","unstructured":"Huang Y-W, Yu F, Hang C, Tsai C-H, Lee D-T, Kuo S-Y (2004) Securing web application code by static analysis and runtime protection. In: Proceedings of the 13th international conference on World Wide Web, ACM","DOI":"10.1145\/988672.988679"},{"issue":"5","key":"1235_CR19","doi-asserted-by":"publisher","first-page":"739","DOI":"10.1016\/j.comnet.2005.01.003","volume":"48","author":"Y-W Huang","year":"2005","unstructured":"Huang Y-W, Tsai C-H, Lin T-P, Huang S-K, Lee D, Kuo S-Y (2005) A testing framework for Web application security assessment. Comput Netw 48(5):739\u2013761","journal-title":"Comput Netw"},{"key":"1235_CR20","unstructured":"IBM (2013) IBM web application scanner"},{"key":"1235_CR21","unstructured":"Imperva (2014) Web application attack report #5"},{"key":"1235_CR22","doi-asserted-by":"crossref","unstructured":"Kals S, Kirda E, Kruegel C, Jovanovic N (2006) Secubat: a web vulnerability scanner. In: Proceedings of the 15th international conference on World Wide Web, ACM","DOI":"10.1145\/1135777.1135817"},{"issue":"5","key":"1235_CR23","doi-asserted-by":"publisher","first-page":"731","DOI":"10.1007\/s12652-016-0385-0","volume":"7","author":"MS Kiraz","year":"2016","unstructured":"Kiraz MS (2016) A comprehensive meta-analysis of cryptographic security mechanisms for cloud computing. J Ambient Intell Hum Comput 7(5):731\u2013760","journal-title":"J Ambient Intell Hum Comput"},{"key":"1235_CR24","unstructured":"Kumar P, Pateriya R (2013) DWVP: detection of web application vulnerabilities using parameters of web form. In; Proceedings of joint international conferences on CIIT"},{"issue":"2","key":"1235_CR25","doi-asserted-by":"publisher","first-page":"133","DOI":"10.1007\/s12652-010-0012-4","volume":"1","author":"C Langin","year":"2010","unstructured":"Langin C, Rahimi S (2010) Soft computing in intrusion detection: the state of the art. J Ambient Intell Hum Comput 1(2):133\u2013145","journal-title":"J Ambient Intell Hum Comput"},{"key":"1235_CR26","doi-asserted-by":"crossref","unstructured":"Liban A, Hilles SM (2014) Enhancing Mysql Injector vulnerability checker tool (Mysql Injector) using inference binary search algorithm for blind timing-based attack. In: Control and system graduate research Colloquium (ICSGRC), 2014 IEEE 5th, IEEE","DOI":"10.1109\/ICSGRC.2014.6908694"},{"key":"1235_CR27","doi-asserted-by":"crossref","unstructured":"Liu A, Yuan Y, Wijesekera D, Stavrou A (2009) SQLProb: a proxy-based architecture towards preventing SQL injection attacks. In: Proceedings of the 2009 ACM symposium on applied computing, ACM","DOI":"10.1145\/1529282.1529737"},{"key":"1235_CR28","unstructured":"Livshits VB, Lam MS (2005) Finding security vulnerabilities in java applications with static analysis. In: USENIX security symposium"},{"key":"1235_CR29","unstructured":"Michael C (2005) Black box security testing tools"},{"key":"1235_CR30","unstructured":"Nikto (2019) Nikto. \nhttps:\/\/sectools.org\/tool\/nikto\/\n\n. Accessed 2019"},{"issue":"3","key":"1235_CR31","doi-asserted-by":"publisher","first-page":"361","DOI":"10.1007\/s12652-015-0269-8","volume":"6","author":"S Ouchani","year":"2015","unstructured":"Ouchani S, Lenzini G (2015) Generating attacks in SysML activity diagrams by detecting attack surfaces. J Ambient Intell Hum Comput 6(3):361\u2013373","journal-title":"J Ambient Intell Hum Comput"},{"key":"1235_CR32","first-page":"1","volume":"2018","author":"V Plantevin","year":"2018","unstructured":"Plantevin V, Bouzouane A, Bouchard B, Gaboury S (2018) Towards a more reliable and scalable architecture for smart home environments. J Ambient Intell Hum Comput 2018:1\u201312","journal-title":"J Ambient Intell Hum Comput"},{"issue":"6","key":"1235_CR33","first-page":"515","volume":"4","author":"KN Qureshi","year":"2014","unstructured":"Qureshi KN, Abdullah AH (2014) Localization-based system challenges in vehicular ad hoc networks: survey. SmartCR 4(6):515\u2013528","journal-title":"SmartCR"},{"key":"1235_CR34","doi-asserted-by":"crossref","unstructured":"Qureshi KN, Bashir F, Abdullah AH (2017a) Real time traffic density aware road based forwarding method for vehicular ad hoc networks. In: Wireless and mobile networking conference (WMNC), 2017 10th IFIP, IEEE","DOI":"10.1109\/WMNC.2017.8248850"},{"key":"1235_CR35","first-page":"774788","volume":"72","author":"KN Qureshi","year":"2017","unstructured":"Qureshi KN, Abdullah AH, Kaiwartya O, Iqbal S, Butt RA, Bashir F (2017b) A dynamic congestion control scheme for safety applications in vehicular ad hoc networks. Comput Electr Eng 72:774\u2013788","journal-title":"Comput Electr Eng"},{"key":"1235_CR36","doi-asserted-by":"crossref","unstructured":"Scott D, Sharp R (2002) Abstracting application-level web security. In: Proceedings of the 11th international conference on World Wide Web, ACM","DOI":"10.1145\/511446.511498"},{"key":"1235_CR37","volume-title":"SQL-injection vulnerability scanner using automatic creation of SQL-injection attacks (MySqlinjector)","author":"AYI Shakhatreh","year":"2010","unstructured":"Shakhatreh AYI (2010) SQL-injection vulnerability scanner using automatic creation of SQL-injection attacks (MySqlinjector). Universiti Utara Malaysia, Changlun"},{"key":"1235_CR38","doi-asserted-by":"crossref","unstructured":"Shar LK, Tan HBK (2012) Predicting common web application vulnerabilities from input validation and sanitization code patterns. In: Automated software engineering (ASE), 2012 proceedings of the 27th IEEE\/ACM international conference on, IEEE","DOI":"10.1145\/2351676.2351733"},{"key":"1235_CR39","unstructured":"Shin Y, Williams L, Xie T (2006) Sqlunitgen: Sql injection testing using static and dynamic analysis. In: Supplemental proc. 17th IEEE international conference on software reliability engineering"},{"key":"1235_CR40","unstructured":"Singh AK, Roy S (2012) A network based vulnerability scanner for detecting sqli attacks in web applications. In: Recent advances in information technology (RAIT), 2012 1st international conference on, IEEE"},{"key":"1235_CR41","volume-title":"Pex\u2013white box test generation for. net. International conference on tests and proofs","author":"N Tillmann","year":"2008","unstructured":"Tillmann N, De Halleux J (2008) Pex\u2013white box test generation for. net. International conference on tests and proofs. Springer, Berlin"},{"key":"1235_CR42","unstructured":"Van Rijsbergen C (1979) Information retrieval. Dept. of computer science, University of Glasgow. \nciteseer.ist.psu.edu\/vanrijsbergen79information.html\n\n. Accessed 2019"},{"key":"1235_CR43","unstructured":"Vega Subgraph (2019) \nhttps:\/\/subgraph.com\/vega\/\n\n. Accessed 2019"},{"key":"1235_CR44","unstructured":"Wapiti (2019) \nhttp:\/\/wapiti.sourceforge.net\/\n\n. Accessed 2019"},{"key":"1235_CR45","unstructured":"Web Application Security Consortium (2019) \nhttp:\/\/www.webappsec.org\n\n. Accessed 2019"},{"issue":"5","key":"1235_CR46","doi-asserted-by":"publisher","first-page":"589","DOI":"10.1093\/comjnl\/bxm021","volume":"52","author":"Q Yang","year":"2009","unstructured":"Yang Q, Li JJ, Weiss DM (2009) A survey of coverage-based testing tools. Comput J 52(5):589\u2013597","journal-title":"Comput J"},{"key":"1235_CR47","unstructured":"Zap by Open web application security project(OWASP) (2019) \nhttps:\/\/www.owasp.org\/index.php\/OWASP_Zed_Attack_Proxy_Project\n\n. Accessed 2019"},{"key":"1235_CR48","doi-asserted-by":"crossref","unstructured":"Zhang X-h, Wang Z-j (2010) Notice of retraction a static analysis tool for detecting web application injection vulnerabilities for asp program. In: e-Business and information system security (EBISS), 2010 2nd international conference on, IEEE","DOI":"10.1109\/EBISS.2010.5473561"},{"key":"1235_CR49","doi-asserted-by":"crossref","unstructured":"Zhang L, Gu Q, Peng S, Chen X, Zhao H, Chen D (2010) D-WAV: a web application vulnerabilities detection tool using Characteristics of Web Forms. In: Software engineering advances (ICSEA), 2010 fifth international conference on, IEEE","DOI":"10.1109\/ICSEA.2010.85"}],"container-title":["Journal of Ambient Intelligence and Humanized Computing"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s12652-019-01235-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s12652-019-01235-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s12652-019-01235-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,2,6]],"date-time":"2020-02-06T19:18:21Z","timestamp":1581016701000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s12652-019-01235-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,2,7]]},"references-count":49,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2020,1]]}},"alternative-id":["1235"],"URL":"https:\/\/doi.org\/10.1007\/s12652-019-01235-z","relation":{},"ISSN":["1868-5137","1868-5145"],"issn-type":[{"value":"1868-5137","type":"print"},{"value":"1868-5145","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,2,7]]},"assertion":[{"value":"4 June 2018","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"31 January 2019","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 February 2019","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with ethical standards"}},{"value":"The authors whose names are in paper, certify that they have NO affiliations with or involvement in any organization or entity with any financial interest (such as participation in speakers\u2019 bureaus; membership, employment, consultancies, stock ownership, or other equity interest; and expert testimony or patent-licensing arrangements), or non-financial interest (such as personal or professional relationships, affiliations, knowledge or beliefs) in the subject matter or materials discussed in this manuscript.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}