@techreport{oai:ipsj.ixsq.nii.ac.jp:00082838,
 author = {Daiki, Koizumi and Takeshi, Matsuda and Michio, Sonoda and Shigeichi, Hirasawa and Daiki, Koizumi and Takeshi, Matsuda and Michio, Sonoda and Shigeichi, Hirasawa},
 issue = {10},
 month = {Jul},
 note = {The SQL injection attack causes very serious problem to web applications which have database including personal data. To detect the SQL injection attack, the parsing and the black list based on the existed attack have been widely used. Those approaches, however, have some problems in terms of the size of list or calculation costs as the number of attacks increases. For this point, the authors have previously proposed a simple automatic detection algorithm of SQL injection attack. This algorithm requires to calculate the contained rate of suspicious characters with input sequence. This rate would be compared with a known real-valued threshold. This paper proposes the learning algorithm to choose the real-valued threshold from training data sets. Furthermore, some criteria would be considered and their performances would also be examined., The SQL injection attack causes very serious problem to web applications which have database including personal data. To detect the SQL injection attack, the parsing and the black list based on the existed attack have been widely used. Those approaches, however, have some problems in terms of the size of list or calculation costs as the number of attacks increases. For this point, the authors have previously proposed a simple automatic detection algorithm of SQL injection attack. This algorithm requires to calculate the contained rate of suspicious characters with input sequence. This rate would be compared with a known real-valued threshold. This paper proposes the learning algorithm to choose the real-valued threshold from training data sets. Furthermore, some criteria would be considered and their performances would also be examined.},
 title = {A Learning Algorithm of Threshold Value on the Automatic Detection of SQL Injection Attack},
 year = {2012}
}