Detection of SQL/XSS Attacks on Web API with Artificial Intelligence / Machine Learning

This project aims to detect SQL and XSS injections in API requests/params using machine learning.

Project Overview

This project aims to detect SQL and XSS injections in API requests and parameters using Machine Learning techniques.
The goal is to create a simple pipeline enabling:

preparing and cleaning a dataset of API requests,
training a model capable of automatically classifying requests as benign, sql_injection or xss,
providing a reusable model for testing or a future real-time detection API.

Project Workflow

Prepare the dataset
The file generated_payloads.csv in the data/ folder contains examples of labeled API requests (sql_injection, xss, benign) from external sources such as Kaggle or generated locally.
Dataset cleaning and splitting
```
python scripts/clean_and_split.py
```

The script:

removes duplicates and empty lines,
cleans texts (spaces, line breaks, tabs),
normalizes labels, and it generates:
data/combined.csv: cleaned complete dataset,
data/train.csv: training data (80%),
data/test.csv: test data (20%).

Model training
```
python scripts/train_model.py
```

The model uses an ML pipeline:

TF-IDF Vectorizer (TfidfVectorizer): transforms text requests into numerical vectors, capturing the importance of words or suspicious symbols.

Logistic Regression (LogisticRegression): supervised classifier that learns to associate TF-IDF vectors with the classes sql_injection, xss or benign.

After training, the model is saved in the models folder; it can then be used to predict the class of a new request.

Automatic tests
```
pytest -v -s tests/test_pipeline.py
```

The test verifies that:

the model is loadable,
it correctly predicts several simple examples,
no pipeline error occurs.

Python dependencies
```
pip3 install -r requirements.txt
```

Libraries

pandas
scikit-learn
joblib
pytest

Notes
The scripts are designed to be run locally, in a Python 3.13+ environment with the listed dependencies.

API-attack-detection-with-AI

Most Popular