비관계형 데이터베이스 환경에서 CNN과 RNN을 활용한 NoSQL 삽입 공격 탐지 모델
Detection of NoSQL Injection Attack in Non-Relational Database Using Convolutional Neural Network and Recurrent Neural Network
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
데이터 활용의 다양성이 높아짐에 따라 비관계형 데이터베이스 사용이 증가했으며, 이에 대한 NoSQL 삽입 공격또한 증가했다. 전통적으로 NoSQL 삽입 공격을 탐지하기 위해 규칙 기반 탐지 방법론이 제안돼왔으나, 이 방식은규칙의 범위를 벗어나 발생하는 삽입 공격에의 대응이 어렵다는 한계점이 있다. 이에 본 논문에서는 CNN 알고리즘을 이용해 특징을 추출하고, RNN 알고리즘을 활용해 NoSQL 삽입 공격을 탐지하는 기법을 제시한다. 또한, 실험을 통하여 본 논문에서 제시한 모델이 기존의 지도학습을 이용한 가장 우수한 모델보다 정확도는 10%, 정밀도는4%, 재현율은 14%, F2-score는 0.082만큼 더 높은 비율로 NoSQL 삽입 공격을 탐지함을 보인다.
Abstract
With a variety of data types and high utilization of data, non-relational databases are a popular data storage because itsupports better availability and scalability. The increasing use of this technology also brings the risk of NoSQL injectionattacks. Existing works mostly discuss the rule-based detection of NoSQL injection attacks that it is hard to deal withNoSQL queries beyond the coverage of the rules. In this paper, we propose a model for detecting NoSQL injection attacks. Our model is based on deep learning algorithms that select features from NoSQL queries using CNN, and classify NoSQLqueries using RNN. Also, we experiment the proposed model to compare with existing models, and find that our modeloutperforms traditional models in terms of detection rate.
참고문헌 (17)
- "mongodb all customers" (2020)[URL]
- "CWE VIEW: Weaknesses in the 2019 CWE Top 25 Most Dangerous Software Errors" (2020)[URL]
- "OWASP Top10" (2020)[URL]
- "CVE-2018-1784 Detail" (2020)[URL]
- "CVE-2019-9039 Detail" (2020)[URL]
- A. Ron, "No SQL, no injection?", Proceedings of the 36th IEEE Symposium on Web 2.0 Security and Privacy (2015)
- B. Hou, "MongoDB NoSQL Injection Analysis and Detection", Proceedings of the 3rd IEEE International Conference on Cyber Security and Cloud Computing, pp.75~78 (2016)
- A. M. Eassa, "Nosql racket: A testing tool for detecting nosql injection attacks in web applications", International Journal of Advanced Computer Science and Applications, 8(11), pp.614~622 (2017)
- "Thousands of MongoDB Databases Found Exposed on the Internet" (2020)[URL]
- M. R. Ul Islam, "Automatic Detection of NoSQL Injection Using Supervised Learning", Proceedings of the 43rd IEEE Annual Computer Software and Applications Conference, pp.760~769 (2019)
- Y. Bengio, "Representation Learning: A Review and New Perspectives", IEEE Transactions on Pattern Analysis and Machine Intelligence, 35(8), pp.1798~1828 (2013)
- S. Albelwi, "A frame work for designing the architectures of deep convolutional neural networks", Entropy, 19(6), pp.242~263 (2017)
- F. A. Gers, "Learning to forget:continua l prediction with LSTM", Proceedings of the 9th International Conference on Artificial Neural Networks, pp.850~855 (1999)
- B. Shi, "An endto-end trainable neural network for image-based sequence recognition and its application to scene text recognitio -n", IEEE transactions on pattern analysis and machine intelligence, 39(11), pp.2298~2304 (2016)
- X. Zhang, "Character-level convolutional networ -ks for text classification", Advances in Neural Information Processing Systems, 28, pp.649~657 (2015)
- B. Xu, "Empirical evaluation of rectified activations in convolutional network", arXiv preprint arXiv:1505.00853, ~ (2015)
- D. P. Kingma, "Adam: A method for stochastic optimization", arXiv preprint arXiv:1412.6980, ~ (2014)