{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,6]],"date-time":"2026-04-06T10:09:42Z","timestamp":1775470182381,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":48,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,11,20]],"date-time":"2024-11-20T00:00:00Z","timestamp":1732060800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"HY-Project","award":["No.4E49EFF3"],"award-info":[{"award-number":["No.4E49EFF3"]}]},{"name":"the Gansu Province Key Research and Development Plan - Industrial Project","award":["No. 22YF7GA004"],"award-info":[{"award-number":["No. 22YF7GA004"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,11,20]]},"DOI":"10.1145\/3698038.3698569","type":"proceedings-article","created":{"date-parts":[[2024,11,14]],"date-time":"2024-11-14T06:32:43Z","timestamp":1731565963000},"page":"69-82","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["SQLStateGuard: Statement-Level SQL Injection Defense Based on Learning-Driven Middleware"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3685-4852","authenticated-orcid":false,"given":"Xin","family":"Liu","sequence":"first","affiliation":[{"name":"School of Information Science & Engineering, Lanzhou University, Lanzhou, Gansu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7465-773X","authenticated-orcid":false,"given":"Yuanyuan","family":"Huang","sequence":"additional","affiliation":[{"name":"School of Information Science & Engineering, Lanzhou University, Lanzhou, Gansu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-7248-1732","authenticated-orcid":false,"given":"Tianyi","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Information Science & Engineering, Lanzhou University, Lanzhou, Gansu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7961-8502","authenticated-orcid":false,"given":"Song","family":"Li","sequence":"additional","affiliation":[{"name":"The State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, Zhejiang, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3235-3463","authenticated-orcid":false,"given":"Weina","family":"Niu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, Sichuan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9403-7140","authenticated-orcid":false,"given":"Jun","family":"Shen","sequence":"additional","affiliation":[{"name":"School of Computing and Information Technology, University of Wollongong, Wollongong, New South Wales, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8054-5446","authenticated-orcid":false,"given":"Qingguo","family":"Zhou","sequence":"additional","affiliation":[{"name":"School of Information Science & Engineering, Lanzhou University, Lanzhou, Gansu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3488-4679","authenticated-orcid":false,"given":"Xiaokang","family":"Zhou","sequence":"additional","affiliation":[{"name":"Kansai University, Suita, Osaka, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,11,20]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2939870"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2018.1661316"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS.2010.76"},{"key":"e_1_3_2_1_4_1","volume-title":"Understanding the top 10 owasp vulnerabilities. arXiv preprint arXiv:2012.09960","author":"Bach-Nutman Matthew","year":"2020","unstructured":"Matthew Bach-Nutman. 2020. Understanding the top 10 owasp vulnerabilities. arXiv preprint arXiv:2012.09960 (2020)."},{"key":"e_1_3_2_1_5_1","unstructured":"Miroslav Stampar Bernardo Damele Assumpcao Guimaraes. 2016. SQLMAP. https:\/\/sqlmap.org\/"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1698750.1698754"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24852-1_21"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS55610.2022.00044"},{"key":"e_1_3_2_1_9_1","volume-title":"Support-vector networks. Machine learning 20, 3","author":"Cortes Corinna","year":"1995","unstructured":"Corinna Cortes and Vladimir Vapnik. 1995. Support-vector networks. Machine learning 20, 3 (1995), 273--297."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103093"},{"key":"e_1_3_2_1_11_1","volume-title":"Seminar Work (Seminer \u00c7alismasi)","author":"Dahse Johannes","unstructured":"Johannes Dahse and J\u00f6rg Schwenk. 2010. RLPS-A static source code analyser for vulnerabilities in PHP scripts. In Seminar Work (Seminer \u00c7alismasi). Horst G\u00f6rtz Institute Ruhr-University Bochum. Citeseer."},{"key":"e_1_3_2_1_12_1","volume-title":"Antonio Estepa Alonso, and German Madinabeitia.","author":"D\u00edaz-Verdejo Jes\u00fas E","year":"2022","unstructured":"Jes\u00fas E D\u00edaz-Verdejo, Rafael Estepa Alonso, Antonio Estepa Alonso, and German Madinabeitia. 2022. A critical review of the techniques used for anomaly detection of HTTP-based attacks: taxonomy, limitations and open challenges. Computers & Security (2022), 102997."},{"key":"e_1_3_2_1_13_1","unstructured":"Nick Galbreath. 2014. Libinjection. https:\/\/github.com\/client9\/libinjection"},{"key":"e_1_3_2_1_14_1","volume-title":"International Conference on Information and Communications Security. Springer, 199--218","author":"Guo Ning","year":"2019","unstructured":"Ning Guo, Xiaoyong Li, Hui Yin, and Yali Gao. 2019. Vulhunter: An automated vulnerability detection system based on deep learning and bytecode. In International Conference on Information and Communications Security. Springer, 199--218."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1101908.1101935"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"e_1_3_2_1_17_1","volume-title":"International conference on machine learning. PMLR, 9099--9117","author":"Hua Weizhe","year":"2022","unstructured":"Weizhe Hua, Zihang Dai, Hanxiao Liu, and Quoc Le. 2022. Transformer quality in linear time. In International conference on machine learning. PMLR, 9099--9117."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCICCT.2014.6993127"},{"key":"e_1_3_2_1_19_1","volume-title":"An Approach for SQL Injection Vulnerability Detection. 2009 Sixth International Conference on Information Technology: New Generations","author":"Junjin Mei","year":"2009","unstructured":"Mei Junjin. 2009. An Approach for SQL Injection Vulnerability Detection. 2009 Sixth International Conference on Information Technology: New Generations (2009), 1411--1414."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1363686.1364201"},{"key":"e_1_3_2_1_21_1","volume-title":"Proceedings of naacL-HLT","volume":"1","author":"Ming-Wei Chang Jacob Devlin","year":"2019","unstructured":"Jacob Devlin Ming-Wei Chang Kenton and Lee Kristina Toutanova. 2019. Bert: Pre-training of deep bidirectional transformers for language understanding. In Proceedings of naacL-HLT, Vol. 1. Minneapolis, Minnesota, 2."},{"key":"e_1_3_2_1_22_1","volume-title":"Sentencepiece: A simple and language independent subword tokenizer and detokenizer for neural text processing. arXiv preprint arXiv:1808.06226","author":"Kudo Taku","year":"2018","unstructured":"Taku Kudo and John Richardson. 2018. Sentencepiece: A simple and language independent subword tokenizer and detokenizer for neural text processing. arXiv preprint arXiv:1808.06226 (2018)."},{"key":"e_1_3_2_1_23_1","volume-title":"Albert: A lite bert for self-supervised learning of language representations. arXiv preprint arXiv:1909.11942","author":"Lan Zhenzhong","year":"2019","unstructured":"Zhenzhong Lan, Mingda Chen, Sebastian Goodman, Kevin Gimpel, Piyush Sharma, and Radu Soricut. 2019. Albert: A lite bert for self-supervised learning of language representations. arXiv preprint arXiv:1909.11942 (2019)."},{"key":"e_1_3_2_1_24_1","first-page":"1","article-title":"A SQL Injection Detection Method based on Adaptive Deep Forest","volume":"99","author":"Li Q.","year":"2019","unstructured":"Q. Li, W. Li, J. Wang, and M. Cheng. 2019. A SQL Injection Detection Method based on Adaptive Deep Forest. IEEE Access PP, 99 (2019), 1--1.","journal-title":"IEEE Access PP"},{"key":"e_1_3_2_1_25_1","volume-title":"4th Intl Conf on Big Data Intelligence and Computing and Cyber Science and Technology Congress (DASC\/PiCom\/DataCom\/CyberSciTech)","author":"Liu Xin","unstructured":"Xin Liu, Qingchen Yu, Xiaokang Zhou, and Qingguo Zhou. 2018. Owl-Eye: An Advanced Detection System of Web Attacks Based on HMM. In 2018 IEEE 16th Intl Conf on Dependable, Autonomic and Secure Computing, 16th Intl Conf on Pervasive Intelligence and Computing, 4th Intl Conf on Big Data Intelligence and Computing and Cyber Science and Technology Congress (DASC\/PiCom\/DataCom\/CyberSciTech). IEEE, 200--207."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2021.02.022"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.3390\/electronics12061344"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICIS46139.2019.8940196"},{"key":"e_1_3_2_1_29_1","volume-title":"Information Technology: New Generations, 2009. ITNG '09. Sixth International Conference on.","author":"Mei J.","year":"2009","unstructured":"J. Mei. 2009. An Approach for SQL Injection Vulnerability Detection. In Information Technology: New Generations, 2009. ITNG '09. Sixth International Conference on."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCES51560.2020.9334626"},{"key":"e_1_3_2_1_31_1","unstructured":"PingCAP. 2022. MySQL Parser. https:\/\/github.com\/pingcap\/parser"},{"key":"e_1_3_2_1_32_1","unstructured":"Python.org. 2022. The official home of the Python Programming Language. https:\/\/python.org\/."},{"key":"e_1_3_2_1_33_1","unstructured":"Sanic. 2022. Sanic Framework. https:\/\/sanic.dev\/en\/."},{"key":"e_1_3_2_1_34_1","unstructured":"SuperCowPowers. 2013. Data-Hacking. https:\/\/github.com\/SuperCowPowers\/data_hacking\/tree\/master\/sql_injection\/data"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2020.105528"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1543135.1542486"},{"key":"e_1_3_2_1_37_1","volume-title":"\u0141 ukasz Kaiser, and Illia Polosukhin","author":"Vaswani Ashish","year":"2017","unstructured":"Ashish Vaswani, Noam Shazeer, Niki Parmar, Jakob Uszkoreit, Llion Jones, Aidan N Gomez, \u0141 ukasz Kaiser, and Illia Polosukhin. 2017. Attention is All you Need. In Advances in Neural Information Processing Systems, I. Guyon, U. V. Luxburg, S. Bengio, H. Wallach, R. Fergus, S. Vishwanathan, and R. Garnett (Eds.), Vol. 30. Curran Associates, Inc."},{"key":"e_1_3_2_1_38_1","unstructured":"WordPress. 2022. Blog Tool Publishing Platform and CMS. https:\/\/wordpress.org\/."},{"key":"e_1_3_2_1_39_1","volume-title":"International Conference on Machine Learning & Cybernetics.","author":"Wu X. R.","year":"2012","unstructured":"X. R. Wu and Ppk Chan. 2012. SQL injection attacks detection in adversarial environments by k-centers. In International Conference on Machine Learning & Cybernetics."},{"key":"e_1_3_2_1_40_1","volume-title":"2017 IEEE 9th International Conference on Communication Software and Networks (ICCSN).","author":"Xiao Z.","unstructured":"Z. Xiao, Z. Zhou, W. Yang, and C. Deng. 2017. An approach for SQL injection detection based on behavior and response analysis. In 2017 IEEE 9th International Conference on Communication Software and Networks (ICCSN)."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1080\/09540091.2022.2067124"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2895751"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2019.06.008"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3331453.3361280"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS55610.2022.00043"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS49710.2020.00054"},{"key":"e_1_3_2_1_47_1","first-page":"88","article-title":"SQL injection behavior detection method for network environment [J]","volume":"37","author":"F ZHAOY, G XIONG","year":"2016","unstructured":"F ZHAOY, G XIONG, et al. 2016. SQL injection behavior detection method for network environment [J]. Journal of Communications 37, 2 (2016), 88--97.","journal-title":"Journal of Communications"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/DASC.2014.79"}],"event":{"name":"SoCC '24: ACM Symposium on Cloud Computing","location":"Redmond WA USA","acronym":"SoCC '24","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the ACM Symposium on Cloud Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3698038.3698569","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3698038.3698569","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T18:59:58Z","timestamp":1755889198000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3698038.3698569"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,20]]},"references-count":48,"alternative-id":["10.1145\/3698038.3698569","10.1145\/3698038"],"URL":"https:\/\/doi.org\/10.1145\/3698038.3698569","relation":{},"subject":[],"published":{"date-parts":[[2024,11,20]]},"assertion":[{"value":"2024-11-20","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}