Over 20 Years of SQL Injection Attacks - Refining Web Attack Detection Using Data Mining Techniques

This talk demonstrates how to use CDN logs classified as SQL injection attacks to refine security rules, improve detection, and identify emerging attacks. It walks through a data mining process that uses natural language processing to clean and analyze payloads, extract keywords, and find relationships.