Enhancing SQL Injection Detection: CGAN with Discriminator Optimization Using Genetic Algorithm
SQL injection (SQLi) is the third most critical vulnerability in systems, posing significant threats to data and system integrity. Traditional detection methods often fail to adapt to evolving attack techniques, necessitating advanced solutions. This work utilizes Conditional Generative Adversarial Networks (CGAN) to generate realistic SQLi attacks and enhance detection systems, enabling adaptability to new attacker methods. More-over, the CGAN discriminator hyperparameters (i.e., neurons per layer, dropout rate, and number of layers) are fine-tuned using Genetic Algorithms (GA), which improved the accuracy and performance in detecting and classifying various SQLi attacks. The results show that this system outperforms traditional models like Naive Bayes, Decision Tree, Multi-layer Perceptron, Bagging (i.e., Random Forest), Stacking, and Boosting. This approach demonstrates strong capabilities in generating realistic attack scenarios, achieving data balance, and building robust SQLi defense systems for modern web applications.
Authors
- Ola Surakhi (ORCID: https://orcid.org/0000-0002-9546-5526)
- Radi Jarrar (ORCID: https://orcid.org/0000-0003-2692-8096)
- Mohammad AlKhanafseh (ORCID: https://orcid.org/0000-0002-6250-7291)
- Sondos Shaib
Institutions
- American University of Madaba (JO)
- Al-Quds University (PS)
- Birzeit University (PS)
Publication Details
- Published
- 2025-04-16
- DOI
- https://doi.org/10.1109/ictcs65341.2025.10989434
- Primary Topic
- Web Application Security Vulnerabilities
- Type
- article
- Field-Weighted Citation Impact
- 0.00