AdvSQLi: Generating Adversarial SQL Injections against Real-world WAF-as-a-service. (arXiv:2401.02615v1 [cs.CR])

As the first defensive layer that attacks would hit, the web application
firewall (WAF) plays an indispensable role in defending against malicious web
attacks like SQL injection (SQLi). With the development of cloud computing,
WAF-as-a-service, as one kind of Security-as-a-service, has been proposed to
facilitate the deployment, configuration, and update of WAFs in the cloud.
Despite its tremendous popularity, the security vulnerabilities of
WAF-as-a-service are still largely unknown, which is highly concerning given
its massive usage. In this paper, we …

adversarial application as-a-service attacks cloud cloud computing computing configuration defending defensive deployment development firewall injection kind malicious real role security service sql sqli sql injection sql injections the web update waf web web application web application firewall web attacks world