gatewayd-plugin-sql-ids-ips

README

gatewayd-plugin-sql-ids-ips

GatewayD plugin for SQL injection detection and prevention.

Features

• Detects SQL injection attacks using two methods:
  • Signature-based detection: Detects SQL injection attacks by matching incoming queries against a list of known malicious queries using a trained deep learning model with Tensorflow and Keras
  • Syntax-based detection: Detects SQL injection attacks by parsing incoming queries and checking for suspicious syntax using libinjection
• Prevents SQL injection attacks by blocking malicious queries from reaching the database server, and returning an error to the client instead
• Prometheus metrics for quantifying detections
• Logging
• Configurable via environment variables

Build for testing

To build the plugin for development and testing, run the following command:

make build-dev

Running the above command causes the go mod tidy and go build to run for compiling and generating the plugin binary in the current directory, named gatewayd-plugin-sql-ids-ips.