Detecting Data Leaks due to SQL Injection

Abstract—SQL injection is a prevalent web application vulner- ability that allows attackers to manipulate database queries, often leading to severe data leaks. This paper surveys existing research on SQL injection attacks and various detection and prevention techniques. We explore classical and modern approaches, includ- ing machine learning paradigms, input verification methods, and parameterized query techniques. By examining the strengths and weaknesses of these approaches, this paper proposes a compre- hensive prevention framework. The challenges, limitations, and future directions for enhancing SQL injection security are also discussed. Index Terms—SQL, vulnerability, queries, leaks, approaches, prevention, machine learning, parameterized query, framework, injection