[转载]A Learning-Based Approach to the Detection of SQL Attacks

信息来源：邪恶八进制信息安全团队（www.eviloctal.com）

Web-based systems are often a composition of infrastruc- ture components, such as web servers and databases, and of application- specific code, such as HTML-embedded scripts and server-side applica- tions. While the infrastructure components are usually developed by ex- perienced programmers with solid security skills, the application-specific code is often developed under strict time constraints by programmers with little security training. As a result, vulnerable web-applications are deployed and made available to the Internet at large, creating easily- exploitable entry points for the compromise of entire networks. Web-based applications often rely on back-end database servers to man- age application-specific persistent state.