Data-mining based SQL injection attack detection using internal query trees

Detecting SQL injection attacks (SQLIAs) is becoming increasingly important in database-driven web sites. Until now, most of the studies on SQLIA detection have focused on the structured query language (SQL) structure at the application level. Unfortunately, this approach inevitably fails to detect those attacks that use already stored procedure and data within the database system. In this paper, we propose a framework to detect SQLIAs at database level by using SVM classification and various kernel functions. The key issue of SQLIA detection framework is how to represent the internal query tree collected from database log suitable for SVM classification algorithm in order to acquire good performance in detecting SQLIAs. To solve the issue, we first propose a novel method to convert the query tree into an n-dimensional feature vector by using a multi-dimensional sequence as an intermediate representation. The reason that it is difficult to directly convert the query tree into an n-dimensional feature vector is the complexity and variability of the query tree structure. Second, we propose a method to extract the syntactic features, as well as the semantic features when generating feature vector. Third, we propose a method to transform string feature values into numeric feature values, combining multiple statistical models. The combined model maps one string value to one numeric value by containing the multiple characteristic of each string value. In order to demonstrate the feasibility of our proposals in practical environments, we implement the SQLIA detection system based on PostgreSQL, a popular open source database system, and we perform experiments. The experimental results using the internal query trees of PostgreSQL validate that our proposal is effective in detecting SQLIAs, with at least 99.6% of the probability that the probability for malicious queries to be correctly predicted as SQLIA is greater than the probability for normal queries to be incorrectly predicted as SQLIA. Finally, we perform additional experiments to compare our proposal with syntax-focused feature extraction and single statistical model based on feature transformation. The experimental results show that our proposal significantly increases the probability of correctly detecting SQLIAs for various SQL statements, when compared to the previous methods.     

Exploring album structure for face recognition in online social networks

In this paper, we propose an album-oriented face-recognition model that exploits the album structure for face recognition in online social networks. Albums, usually associated with pictures of a small group of people at a certain event or occasion, provide vital information that can be used to effectively reduce the possible list of candidate labels. We show how this intuition can be formalized into a model that expresses a prior on how albums tend to have many pictures of a small number of people. We also show how it can be extended to include other information available in a social network. Using two real-world datasets independently drawn from Facebook, we show that this model is broadly applicable and can significantly improve recognition rates.     

Computer aided detection system for micro calcifications in digital mammograms

Breast cancer continues to be a significant public health problem in the world. Early detection is the key for improving breast cancer prognosis. Mammogram breast X-ray is considered the most reliable method in early detection of breast cancer. However, it is difficult for radiologists to provide both accurate and uniform evaluation for the enormous mammograms generated in widespread screening. Micro calcification clusters (MCCs) and masses are the two most important signs for the breast cancer, and their automated detection is very valuable for early breast cancer diagnosis. The main objective is to discuss the computer-aided detection system that has been proposed to assist the radiologists in detecting the specific abnormalities and improving the diagnostic accuracy in making the diagnostic decisions by applying techniques splits into three-steps procedure beginning with enhancement by using Histogram equalization (HE) and Morphological Enhancement, followed by segmentation based on Otsu's threshold the region of interest for the identification of micro calcifications and mass lesions, and at last classification stage, which classify between normal and micro calcifications ‘patterns and then classify between benign and malignant micro calcifications. In classification stage; three methods were used, the voting K-Nearest Neighbor classifier (K-NN) with prediction accuracy of 73%, Support Vector Machine classifier (SVM) with prediction accuracy of 83%, and Artificial Neural Network classifier (ANN) with prediction accuracy of 77%.     

Credit rating with a monotonicity-constrained support vector machine model

Deciding whether borrowers can fulfill their obligations is a major issue for financial institutions, and while various credit rating models have been developed to help achieve this, they cannot reflect the domain knowledge of human experts. This paper proposes a new rating model based on a support vector machine with monotonicity constraints derived from the prior knowledge of financial experts. Experiments conducted on real-world data sets show that the proposed method, not only data driven but also domain knowledge oriented, can help correct the loss of monotonicity in data occurring during the collecting process, and performs better than the conventional counterpart.     

融合Hu矩与BoF-SURF支持向量机的手势识别

基于尺度不变特征变换的特征包（BoF-SIFT）支持向量机的分类方法具有较好的手势识别效果, 但是计算复杂度高、实时性较差。为此, 提出了融合Hu矩与基于快速鲁棒特征的特征包（BoF-SURF）支持向量机（SVM）的手势识别方法。特征包模型中用快速鲁棒性特征（SURF）算法替换尺度不变特征变换（SIFT）算法提取特征, 提高了实时性, 并引入Hu矩描述手势全局特征, 进一步提高识别率。实验结果表明, 算法无论是实时性还是识别率都要高于BoF-SIFT支持向量机方法。     

基于支持向量机的印刷机远程故障诊断监测平台设计

为实现高端印刷机网络化、信息化、智能化,提出一种基于支持向量机(SVM)的印刷机远程网络故障诊断监测平台。该系统采用Windows系统下的Apache、MySQL和PHP(WAMP)开源环境,能够方便地建立远程服务站点,实现B/S架构的网络系统,设计一个基于TCP/IP协议的数据传输接口,通过客户端将现场设备数据发送给站点服务器,并存入本地数据库,基于专家系统建立诊断知识库,通过支持向量机进行故障的分类诊断。该平台具有通用性,可根据对象不同更改数据库结构。实际运行情况表明,该系统运行稳定。     

基于线性判别边信息结合PHL的三维人脸识别

针对三维人脸识别中受光照、姿态、表情等变化而影响识别性能的问题,提出了一种原型超平面学习算法。利用SVM将弱标记数据集中的每个样本表示为一个原型超平面中层特征,使用学习组合系数从未标记的通用数据集中选择支持向量稀疏集;借助于Fisher准则最大化未标记数据集的判别能力,使用迭代优化算法求解目标函数;利用SILD进行特征提取,余弦相似性度量完成最终的人脸识别。在USCD/Honda、FRGC v2、LFW及自己搜集的人脸数据集上的实验结果表明,该算法优于其他几种三维人脸识别算法。     

便携心电传感器的心房肥大诊断研究

基于便携式传感器的模式识别在心电(ECG)监护领域具有广泛的应用前景,并且在心律不齐、心肌梗塞、心室肥大等心电的识别算法上都已有大量的研究与应用,但在心房肥大诊断上却未有模式识别相关的研究成果。心房肥大病症的心电数据量不足给研究造成重大障碍,部分分类器无法适应小样本训练下的分类。针对小样本训练进行研究,对比了不同分类方法,显示了基于统计模式识别的支持向量机(SVM)应用于心房肥大的应用潜力。另外,由于不同个体的心房肥大心电存在差异,在实际应用环境中,SVM存在无法良好泛化的问题,存在类别错分的医学风险。针对类别错分情况,采用分类器融合的方法改进分类器,提出了在SVM分类器输出端增加了拒绝域的分类器(SVM-R)的方法。实验结果表明:SVMR有较高的分类准确率与诊断可信度。     

适用于智能传感器系统的SVM集成研究

以支持向量机(SVM)为代表的人工智能技术在智能传感器系统中得到了广泛的应用,但传统的SVM有"灾难性遗忘"现象,即会遗忘以前学过的知识,并且不能增量学习新的数据,这已无法满足智能传感器系统实时性的要求。而Learn++算法能够增量地学习新来的数据,即使新来数据属于新的类,也不会遗忘已经学习到的旧知识。为了解决上述问题,提出了一种基于壳向量算法的Learn++集成方法。实验结果表明:该算法不但具有增量学习的能力,而且在保证分类精度的同时,提高了训练速度,减小了存储规模,可以满足当下智能传感器系统在线学习的需求。     

基于Fisher 准则和最大熵原理的SVM核参数选择方法

针对支持向量机(SVM)核参数选择困难的问题,提出一种基于Fisher准则和最大熵原理的SVM核参数优选方法.首先,从SVM分类器原理出发,提出SVM核参数优劣的衡量标准;然后,根据此标准利用Fisher准则来优选SVM核参数,并引入最大熵原理进一步调整算法的优选性能.整个模型采用粒子群优化算法(PSO)进行参数寻优.UCI标准数据集实验表明了所提方法具有良好的参数选择效果,优选出的核参数能够使SVM具有较高的泛化性能.