A Parse Tree-Based NoSQL Injection Attacks Detection Mechanism

Nowadays, many IT giants such as Facebook, Google, and Amazon adopt non-relational database (NoSQL, Not only SQL) technologies to manage their systems. Although these kind of database technologies have made outstanding contributions to the development of the IT industry, it also exposed some security risks such as SQL injection attacks. Up to now, there are many solutions to counter SQL injection attacks in SQL databases. However, there exist few approaches to counter injection attacks in NoSQL databases. So, how to design an effective NoSQL injection attacks detecting mechanism becomes a subject worthy of in-depth study. In this paper, we based on semantic structure analysis of execution statements to propose a detection approach using parse tree. Based on this approach, we focus on MongoDB to propose a dynamic NoSQL injection attacks detection mechanism in the web environment called DND. It does not require access to or modifying source codes, rewriting source codes with extra libraries, or complex assisted devices. Finally, the experimental results are shown that DND has high accuracy rates, low false positive rates, and low response time.