A Survey on Hybrid SQL Injection Detection: Feature-Selection, Classical Machine Learning, and Deep Learning Approaches to Obfuscated, Blind, and Time-Based SQLi
  • Author(s): Pushkar Y Jane , ; Roshani K Mukadam
  • Paper ID: 1712995
  • Page: 1485-1489
  • Published Date: 20-12-2025
  • Published In: Iconic Research And Engineering Journals
  • Publisher: IRE Journals
  • e-ISSN: 2456-8880
  • Volume/Issue: Volume 9 Issue 6 December-2025
Abstract

SQL Injection (SQLi) remains one of the most persistent and damaging classes of web application vulnerabilities. As attackers adopt more sophisticated techniques ? obfuscation, blind channels, and time-based inference ? traditional detection techniques (rule/signature based and shallow ML) show limited robustness. Recently, hybrid approaches that combine feature selection, classical machine learning (ML) for fast filtering, and deep learning (DL) for semantic verification have gained traction. This survey thoroughly analyzes contemporary SQL Injection (SQLi) detection methods, specifically focusing on hybrid architectures capable of identifying obfuscated, blind, and time-based variants. This section details the SQLi attack taxonomy and corresponding defensive mechanisms. It further explores the application of advanced feature engineering techniques, such as Chi-Square ranking, to enhance detection. The analysis concludes with a performance evaluation (benchmarking) of both Machine Learning (ML) and Deep Learning (DL) models employed in this security domain.

Citations

IRE Journals:
Pushkar Y Jane , , Roshani K Mukadam "A Survey on Hybrid SQL Injection Detection: Feature-Selection, Classical Machine Learning, and Deep Learning Approaches to Obfuscated, Blind, and Time-Based SQLi" Iconic Research And Engineering Journals Volume 9 Issue 6 2025 Page 1485-1489 https://doi.org/10.64388/IREV9I6-1712995

IEEE:
Pushkar Y Jane , , Roshani K Mukadam "A Survey on Hybrid SQL Injection Detection: Feature-Selection, Classical Machine Learning, and Deep Learning Approaches to Obfuscated, Blind, and Time-Based SQLi" Iconic Research And Engineering Journals, 9(6) https://doi.org/10.64388/IREV9I6-1712995