A two-layer SQL injection detection framework: a combination of formal grammar analysis and semantic intent modeling based on llm

Иргашева , Дурдона, Гаипназаров , Рустам, Мухтарова , Гулнора

Al-Farg'oniy avlodlari · 2026-yil

Annotatsiya

Stealthy SQL injections using obfuscation, alternative encodings, and semantically veiled constructs remain a hard-to-detect threat to web applications. The paper proposes the INSECT framework, which combines formal grammatical analysis of SQL queries with semantic modeling of intentions based on LLMs. The first layer detects structural anomalies, while the second recognizes malicious intent in syntactically correct queries. Experiments on a dataset of 4,800 queries, including 1,200 obfuscated injections, demonstrated 96.7% accuracy with a 2.1% false positive rate, outperforming signature-based, grammatical, and neural network baseline approaches.

Maqola ma’lumotlari
MualliflarИргашева , Дурдона, Гаипназаров , Рустам, Мухтарова , Гулнора
JurnalAl-Farg'oniy avlodlari
NashriyotТАТУ Фарғона филиали
ISSN2181-4252
Nashr sanasi2026-04-28
Son2
Betlar55-63
TilIngliz
Ilmiy sohaTexnika
Indeksga qo‘shilgan2026-08-26

Maqolaning asl sahifasi

Kalit so‘zlar

SQL injection, large language models, semantic intent analysis, formal grammar, obfuscation, cybersecurity., SQL-инъекции, большие языковые модели, семантический анализ намерений, формальная грамматика, обфускация, кибербезопасность., SQL-inʼeksiya, katta til modellari, semantik niyat tahlili, formal grammatika, obfuskatsiya, kiberxavfsizlik

Ilmiy soha

Texnika

Iqtibos keltirish

APAИргашева , Дурдона, Гаипназаров , Рустам, & Мухтарова , Гулнора (2026). A two-layer SQL injection detection framework: a combination of formal grammar analysis and semantic intent modeling based on llm. Al-Farg'oniy avlodlari, (2), 55-63. https://al-fargoniy.uz/index.php/journal/article/view/1126
GOST (OAK)Иргашева , Дурдона, Гаипназаров , Рустам, Мухтарова , Гулнора A two-layer SQL injection detection framework: a combination of formal grammar analysis and semantic intent modeling based on llm // Al-Farg'oniy avlodlari. – 2026. – № 2. – P. 55-63.
MLAИргашева , Дурдона, Гаипназаров , Рустам, and Мухтарова , Гулнора. “A two-layer SQL injection detection framework: a combination of formal grammar analysis and semantic intent modeling based on llm.” Al-Farg'oniy avlodlari, (2), 55-63, 2026. https://al-fargoniy.uz/index.php/journal/article/view/1126
ChicagoИргашева , Дурдона, Гаипназаров , Рустам, and Мухтарова , Гулнора. “A two-layer SQL injection detection framework: a combination of formal grammar analysis and semantic intent modeling based on llm.” Al-Farg'oniy avlodlari, (2), 55-63 (2026). https://al-fargoniy.uz/index.php/journal/article/view/1126
HarvardИргашева , Дурдона, Гаипназаров , Рустам, and Мухтарова , Гулнора (2026) ‘A two-layer SQL injection detection framework: a combination of formal grammar analysis and semantic intent modeling based on llm’, Al-Farg'oniy avlodlari, (2), 55-63. https://al-fargoniy.uz/index.php/journal/article/view/1126
BibTeX
@article{article2026,
  title = {A two-layer SQL injection detection framework: a combination of formal grammar analysis and semantic intent modeling based on llm},
  author = {Иргашева , Дурдона and Гаипназаров , Рустам and Мухтарова , Гулнора},
  journal = {Al-Farg'oniy avlodlari},
  year = {2026},
  number = {2},
  pages = {55-63},
  url = {https://al-fargoniy.uz/index.php/journal/article/view/1126}
}

Boshqa maqola uchun iqtibos tayyorlash

Al-Farg'oniy avlodlari jurnalidan boshqa maqolalar

Al-Farg'oniy avlodlari — barcha maqolalar · 2026-yil arxivi

Иргашева , Дурдона — boshqa maqolalari

Texnika sohasidagi boshqa maqolalar

Texnika sohasidagi OAK jurnallari