SQL Injection Vulnerability Detection Based on Pissa-Tuned Llama 3 Large Language Model

SQL injection vulnerability is a common cyber security vulnerability. The existing SQL injection attack detection methods have problems such as high false positive rate and insufficient migration. In view of the powerful natural language processing ability of large language models, this paper proposes a SQL injection vulnerability detection method based on PiSSA fine-tuning of Llama3 large language models. The experimental results show that the proposed method achieves 99.81% accuracy and 0.19% false positive rate on the common benchmark data set, which verifies the good performance of the large language model in the field of SQL injection attack detection.

Authors

Institutions

Publication Details

Published
2024-12-13
DOI
https://doi.org/10.1109/icftic64248.2024.10912886
Primary Topic
Web Application Security Vulnerabilities
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

SQL Injection Vulnerability Detection Based on Pissa-Tuned Llama 3 Large Language Model

Shenghan Lou, Yingying Zhang, Zutao Jiang, Zhuang Tian et al.
Web Application Security Vulnerabilities
article

SQL Injection Vulnerability Detection Based on Pissa-Tuned Llama 3 Large Language Model

Shenghan Lou, Yingying Zhang, Zutao Jiang, Zhuang Tian, Xingkai Cheng
article en

Abstract

SQL injection vulnerability is a common cyber security vulnerability. The existing SQL injection attack detection methods have problems such as high false positive rate and insufficient migration. In view of the powerful natural language processing ability of large language models, this paper proposes a SQL injection vulnerability detection method based on PiSSA fine-tuning of Llama3 large language models. The experimental results show that the proposed method achieves 99.81% accuracy and 0.19% false positive rate on the common benchmark data set, which verifies the good performance of the large language model in the field of SQL injection attack detection.

National Computer Network Emergency Response Technical Team/Coordination Center of Chinar (CN)
Openalex Percentile: Top 55%
Web Application Security Vulnerabilities
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.