{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T23:17:19Z","timestamp":1792797439748,"version":"4.5.0"},"reference-count":49,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2019,9,1]],"date-time":"2019-09-01T00:00:00Z","timestamp":1567296000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,9,1]],"date-time":"2019-09-01T00:00:00Z","timestamp":1567296000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,9,1]],"date-time":"2019-09-01T00:00:00Z","timestamp":1567296000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"EC","award":["FP7-607109"],"award-info":[{"award-number":["FP7-607109"]}]},{"name":"Funda\u00e7\u00e3o para a Ci\u00eancia e a Tecnologia","award":["AAC-2\/SAICT\/2017-029058 Grant UID\/CEC\/00408\/2019 UID\/CEC\/50021\/2019"],"award-info":[{"award-number":["AAC-2\/SAICT\/2017-029058 Grant UID\/CEC\/00408\/2019 UID\/CEC\/50021\/2019"]}],"id":[{"id":"https:\/\/ror.org\/00snfqn58","id-type":"ROR","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Rel."],"published-print":{"date-parts":[[2019,9]]},"DOI":"10.1109\/tr.2019.2900007","type":"journal-article","created":{"date-parts":[[2019,3,21]],"date-time":"2019-03-21T15:40:52Z","timestamp":1553182852000},"page":"1168-1188","source":"Crossref","is-referenced-by-count":21,"title":["SEPTIC: Detecting Injection Attacks and Vulnerabilities Inside the DBMS"],"prefix":"10.1109","volume":"68","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4478-8680","authenticated-orcid":false,"given":"Iberia","family":"Medeiros","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Miguel","family":"Beatriz","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0411-4542","authenticated-orcid":false,"given":"Nuno","family":"Neves","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7873-5531","authenticated-orcid":false,"given":"Miguel","family":"Correia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","year":"2014","journal-title":"eclipse AspectJ"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3986"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/11663812_7"},{"key":"ref32","article-title":"Naked security by SOPHOS: The web attacks that refuse to die","year":"2016"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2018.2839339"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2931037.2931041"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-13257-0_26"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2103656.2103678"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2011.06.020"},{"key":"ref34","year":"0","journal-title":"PostgreSQL"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1199"},{"key":"ref27","year":"0","journal-title":"MariaDB"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2015.2457411"},{"key":"ref2","article-title":"Q1 2016 state of the Internet\/security report","volume":"3","year":"2016"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-81-322-2650-5_4"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1363686.1364201"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2009.5070521"},{"key":"ref21","author":"koschany","year":"2013","journal-title":"Debian Hardening"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/PRDC.2010.24"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/1529282.1529737"},{"key":"ref26","article-title":"OWASP Top 10: The ten most critical web application security risks – RC2","author":"gigler","year":"2017","journal-title":"OWASP Foundation"},{"key":"ref25","year":"2014","journal-title":"OSVDB"},{"key":"ref10","year":"2014","journal-title":"Common Vulnerabilities and Exposures"},{"key":"ref11","year":"2015","journal-title":"SolidIT DB-Engines Ranking"},{"key":"ref40","year":"2014","journal-title":"Spring"},{"key":"ref12","article-title":"SQL smuggling or, the attack that wasn’t there","author":"douglen","year":"2007","journal-title":"COMSEC Consulting Inf Secur"},{"key":"ref13","author":"dowd","year":"2006","journal-title":"The Art of Software Security Assessment"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.37"},{"key":"ref15","year":"2015","journal-title":"Gambas"},{"key":"ref16","first-page":"45","article-title":"pSigene: Webcrawling to generalize SQL injection signatures","author":"modelo-howard","year":"0","journal-title":"Proc IEEE\/IFIP Int Conf Dependable Syst Netw"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1101908.1101935"},{"key":"ref18","author":"howard","year":"2007","journal-title":"Writing Secure Code For Windows Vista"},{"key":"ref19","year":"2014","journal-title":"JSOUP"},{"key":"ref4","author":"bell","year":"2007","journal-title":"Expert MySQL"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315249"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1108473.1108496"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24852-1_21"},{"key":"ref8","first-page":"37","article-title":"BenchLab: An open testbed for realistic benchmarking of web applications","author":"cecchet","year":"0","journal-title":"Proc 2nd USENIX Conf Web Appl Develop"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2970276.2970343"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2007.70748"},{"key":"ref9","author":"clarke","year":"2009","journal-title":"SQL Injection Attacks and Defense"},{"key":"ref46","article-title":"Practical dynamic taint analysis for countering input validation attacks on web applications","author":"xu","year":"2005"},{"key":"ref45","first-page":"123","article-title":"A learning-based approach to the detection of SQL attacks","author":"valeur","year":"0","journal-title":"Detection of Intrusions and Malware and Vulnerability Assessment"},{"key":"ref48","year":"2017","journal-title":"Usage of server-side programming languages for websites W3Techs"},{"key":"ref47","year":"2016","journal-title":"Wapiti"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516696"},{"key":"ref41","year":"2014","journal-title":"SQLmap"},{"key":"ref44","year":"2004","journal-title":"Trustwave SpiderLabs ModSecurity—Open Source Web Application Firewall"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/1111037.1111070"}],"container-title":["IEEE Transactions on Reliability"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/24\/8821425\/08672505.pdf?arnumber=8672505","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,13]],"date-time":"2022-07-13T16:53:30Z","timestamp":1657731210000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8672505\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,9]]},"references-count":49,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tr.2019.2900007","relation":{},"ISSN":["0018-9529","1558-1721"],"issn-type":[{"value":"0018-9529","type":"print"},{"value":"1558-1721","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,9]]}}}