SQL Injection Vulnerability Detection Based on Pissa-Tuned Llama 3 Large Language Model
SQL injection vulnerability is a common cyber security vulnerability. The existing SQL injection attack detection methods have problems such as high false positive rate and insufficient migration. In view of the powerful natural language processing ability of large language models, this paper proposes a SQL injection vulnerability detection method based on PiSSA fine-tuning of Llama3 large language models. The experimental results show that the proposed method achieves 99.81% accuracy and 0.19% false positive rate on the common benchmark data set, which verifies the good performance of the large language model in the field of SQL injection attack detection.
Authors
- Shenghan Lou (ORCID: https://orcid.org/0000-0001-8826-3160)
- Yingying Zhang (ORCID: https://orcid.org/0000-0002-6950-0906)
- Zutao Jiang (ORCID: https://orcid.org/0000-0002-6787-5499)
- Zhuang Tian (ORCID: https://orcid.org/0000-0002-5689-714X)
- Xingkai Cheng (ORCID: https://orcid.org/0000-0002-6889-611X)
Institutions
- National Computer Network Emergency Response Technical Team/Coordination Center of Chinar (CN)
Publication Details
- Published
- 2024-12-13
- DOI
- https://doi.org/10.1109/icftic64248.2024.10912886
- Primary Topic
- Web Application Security Vulnerabilities
- Type
- article
- Field-Weighted Citation Impact
- 0.00