基于Simhash的SQL注入漏洞检测技术研究

Research on SQL injection vulnerability detection technology based on Simhash

针对传统SQL注入漏洞检测方法准确率和效率无法达到很好平衡的问题,提出了一种基于Simhash文本相似性检测的SQL注入漏洞检测技术。使用特征值来进行网页间的比较,提高了检测的精度与效率,据此设计并实现了一个SQL注入漏洞检测原型系统。实验结果表明,该系统在检测SQL注入漏洞时兼具了准确性与高效性。

Since the accuracy and efficiency of the traditional SQL injection vulnerability detection methods can not achieve a good balance, a method of SQL injection vulnerabilities detection based on Simhash text similarity detection is proposed. It uses the characteristic value for the comparison between the web page to improve the accuracy and efficiency of the detection. A SQL injection vulnerability detection prototype system is designed and implemented according to it. Experimental results show that the system at the detection of SQL injection vulnerabilities is both accurate and efficient.