Detection of SQL Injection Attacks: A Machine Learning Approach

© 2019 IEEE. With the rapid growth in online services, hacking (alternatively attacking) on online database applications has become a grave concern now. Attacks on online database application are being frequently reported. Among these attacks, the SQL injection attack is at the top of the list. The hackers alter the SQL query sent by the user and inject malicious code therein. Hence, they access the database and manipulate the data. It is reported in the literature that the traditional SQL injection detection algorithms fail to prevent this type of attack. In this paper, we propose a machine learning based heuristic algorithm to prevent the SQL injection attack. We use a dataset of 616 SQL statements to train and test 23 different machine learning classifiers. Among these classifiers, we select the best five classifiers based on their detection accuracy and develop a Graphical User Interface (GUI) application based on these five classifiers. We test our proposed algorithm and the results show that our algorithm is able to detect the SQL injection attack with a high accuracy (93.8%)

Assessment and hardening of IOT development boards

© IFIP International Federation for Information Processing 2019. Internet of Things (IoT) products became recently an essential part of any home in conjunction with the great advancements in internet speeds and services. The invention of IoT based devices became an easy task that could be performed through the widely available IoT development boards. Raspberry Pi is considered one of the advanced development boards that have high hardware capabilities with a reasonable price. Unfortunately, the security aspect of such products is overlooked by the developers, revealing a huge amount of threats that result in invading the privacy and the security of the users. In this research, we directed our study to SSH due to its extensive adoption by the developers. It was found that due to the nature of the Raspberry Pi and development boards, the Raspberry Pi generates predictable and weak keys which make it easy to be utilized by MiTM attack. In this paper, Man in The Middle (MiTM) attack was conducted to examine the security of different variations provided by the SSH service, and various hardening approaches were proposed to resolve the issue of SSH weak implementation and weak keys

Detection of drive-by download attacks using machine learning approach

Copyright © 2017, IGI Global. Drive-by download refers to attacks that automatically download malwares to user\u27s computer without his knowledge or consent. This type of attack is accomplished by exploiting web browsers and plugins vulnerabilities. The damage may include data leakage leading to financial loss. Traditional antivirus and intrusion detection systems are not efficient against such attacks. Researchers proposed plenty of detection approaches mostly passive blacklisting. However, a few proposed dynamic classification techniques, which suffer from clear shortcomings. In this paper, we propose a novel approach to detect drive-by download infected web pages based on extracted features from their source code. We test 23 different machine learning classifiers using data set of 5435 webpages and based on the detection accuracy we selected the top five to build our detection model. The approach is expected to serve as a base for implementing and developing anti drive-by download programs. We develop a graphical user interface program to allow the end user to examine the URL before visiting the website. The Bagged Trees classifier exhibited the highest accuracy of 90.1% and reported 96.24% true positive and 26.07% false positive rate

Prevalence of Pulmonary Hypertension among Patients with β- thalassemia Major in Erbil Province -Iraq

Background:Cardiac manifestation including heart failure, arrhythmia, and pulmonary hypertension  are well recognized among β-thalassemia major patients.Pulmonary hypertension is responsible for about half of their mortalities yearly. Objective:To estimate the prevalence of pulmonary hypertension and identifying the risk factors among β-thalassemia major patients. Patients and Methods: A cross sectional study was carried out in Thalassemia Center and Rizgary Teaching Hospital in Erbil-Iraq during the period from 1st of April to 31st of December, 2017 on a convenient sample of 100 patients with β-thalassemia major. The prevalence of pulmonary hypertension was determined and the diagnosis based on Echography findings. Results: Pulmonary hypertension was observed among 31% of β-thalassemia major patients. The prevalence was significantly related to age, history of splenectomy, improper chelation therapy and obesity, as well (p value =0.04, 0.01, 0.03 and 0.01 respectively). Moreover; the severity of pulmonary hypertension was significantly associated with older age (p= 0.007) and mean lower ejection fraction (p <0.001). Conclusion:The prevalence of pulmonary hypertension among our patients with β-thalassemia major is within acceptable range

Modeling the Completion Time of Public School Building Projects Using Neural Networks

The Ministry of Education in Iraq is confronting a colossal deficiency in school buildings while stakeholders of government funded school buildings projects are experiencing the ill effects of extreme delays caused by many reasons. Those stakeholders are particularly worried to know ahead of time (at contract assignment) the expected completion time of any new school building project. As indicated by a previous research conducted by the authors, taking into account the opinions of Iraqi experts involved with government funded school building projects, nine major causes of delay in school building projects were affirmed through a questionnaire survey specifically are; the contractor's financial status, delay in interim payments, change orders, the contractor rank, work stoppages, the contract value, experience of the supervising engineers, the contract duration and delay penalty. In this research, two prediction models (A and B) were produced to help the concerned decision makers to foresee the expected completion time of typically designed school building projects having (12) and (18) classes separately. The ANN multi-layer feed forward with back-propagation algorithm was utilized to build up the mathematical equations. The created prediction equations demonstrated a high degree of average accuracy of (96.43%) and (96.79%) for schools having (12) and (18) classes, with (R2) for both ANN models of (79.60%) and (85.30%) respectively. It was found that the most influential parameters of both models were the ratio of the sum of work stoppages to the contract duration, the ratio of contractor's financial status to the contract value, the ratio of delay penalty to the total value of contract and the ratio of mean interim payments duration to the contract duration

The importance of native language teaching

Syftet med denna studie har varit att undersöka betydelsen av modersmålsundervisningen i inlärning av andra språk hos eleverna. I studien har vi lyft fram praktiska svårigheter och hinder som försvårar modersmålsundervisningen i förhållande till uppnåendet av en bra och god inlärning av andra språk. I studien har vi utgått från följande frågeställningar; Vad har modersmålsundervisningen för betydelse i förhållande till inlärning av andraspråk hos eleverna? Hur påverkar praktiska svårigheter och hinder som försvårar modersmålsundervisningen inlärningen av andra språk? För att kunna svara på frågeställningar har vi använt oss av en kvalitativ metod i form av semistrukturerade intervjuer med nio deltagare: tre modersmålslärare, tre ämneslärare och tre elever från olika kommunala skolor. Resultatet visar att alla ämneslärare som arbetar med flerspråkiga elever samt de som fokuserar på elevens modersmål är överens om att modersmålet är betydelsefullt i inlärningen av andra språk. Utifrån intervjuerna framkommer det att ett starkt modersmål underlättar inlärningen av andra språk. Denna studie lyfter fram att det förekommer praktiska svårigheter och hinder som försvårar modersmålsundervisningen. Ämneslärarna och eleverna i vår studie tycker att en god modersmålsundervisning underlättar inlärningen av andra språk hos eleverna. Tidsbrist, saknaden av läromedel och lektionstid är praktiska svårigheter och hinder som negativt påverkar modersmålsundervisningen. Dessa svårigheter försvårar inlärningen av andra språk hos eleverna

The importance of native language teaching

Syftet med denna studie har varit att undersöka betydelsen av modersmålsundervisningen i inlärning av andra språk hos eleverna. I studien har vi lyft fram praktiska svårigheter och hinder som försvårar modersmålsundervisningen i förhållande till uppnåendet av en bra och god inlärning av andra språk. I studien har vi utgått från följande frågeställningar; Vad har modersmålsundervisningen för betydelse i förhållande till inlärning av andraspråk hos eleverna? Hur påverkar praktiska svårigheter och hinder som försvårar modersmålsundervisningen inlärningen av andra språk? För att kunna svara på frågeställningar har vi använt oss av en kvalitativ metod i form av semistrukturerade intervjuer med nio deltagare: tre modersmålslärare, tre ämneslärare och tre elever från olika kommunala skolor. Resultatet visar att alla ämneslärare som arbetar med flerspråkiga elever samt de som fokuserar på elevens modersmål är överens om att modersmålet är betydelsefullt i inlärningen av andra språk. Utifrån intervjuerna framkommer det att ett starkt modersmål underlättar inlärningen av andra språk. Denna studie lyfter fram att det förekommer praktiska svårigheter och hinder som försvårar modersmålsundervisningen. Ämneslärarna och eleverna i vår studie tycker att en god modersmålsundervisning underlättar inlärningen av andra språk hos eleverna. Tidsbrist, saknaden av läromedel och lektionstid är praktiska svårigheter och hinder som negativt påverkar modersmålsundervisningen. Dessa svårigheter försvårar inlärningen av andra språk hos eleverna

Estimate final cost of roads using support vector machine

The cost overrun in road construction projects in Iraq is one of the major problems that face the construction of new roads. To enable the concerned government agencies to predict the final cost of roads, the objective this paper suggested is to develop an early cost estimating model for road projects using a support vector machine based on (43) sets of bills of quantity collected in Baghdad city in Iraq. As cost estimates are required at the early stages of a project, consideration was given to the fact that the input data for the support vector machine model could be easily extracted from sketches or the project's scope definition. The data were collected from contracts awarded by the Mayoralty of Baghdad for completed projects between 2010-2013. Mathematical equations were constructed using the Support Vector Machine Algorithm (SMO) technique. An average of accuracy (AA) (99.65%) and coefficient of determination (R2) (97.63%) for the model was achieved by the created prediction equations

Linguistic ambiguity of modification

This paper explains the ambiguity in using modifiers and shows its types. The research contains an analysis of some ambiguous sentences with an explanation of the reasons behind this ambiguity. It presents a theoretical background about modification in general and clarifies different types of ambiguity. It depends on the available grammar sources and the internet to provide enough material. It shows that a modifier is an optional element that depends on the headword. There are two types of modification, also, there are two types of ambiguity. Phrasal verbs can be interpreted in more than one way.Este artículo explica la ambigüedad en el uso de modificadores y muestra sus tipos. La investigación contiene un análisis de algunas frases ambiguas con la explicación de las razones detrás de esta ambigüedad. Presenta un trasfondo teórico sobre la modificación en general y aclara diferentes tipos de ambigüedad. Depende de las fuentes gramaticales disponibles e Internet para proporcionar suficiente material. Muestra que un modificador es un elemento opcional que depende del encabezado. Hay dos tipos de modificaciones, además, hay dos tipos de ambigüedad. Los phrasal verbs se pueden interpretar de más de una forma