Datiphy Takes Part at SJSU College of Science Student Research Day
SQL Injection Detection Using Rule-based Machine Learning Techniques
San Jose, CA – May 25, 2016 – Datiphy Inc., a pioneering startup in data-centric audit and behavioral forensic analysis joined with the Department of Computer Science at San Jose State University to advance the research in data security with machine learning. Under the guidance of Professors Melody Moh and her colleagues, graduate students applied machine learning to data extracted from network traffic by the Datiphy DatiDNA platform and generated Intrusion Detection System (IDS) rules that detect SQL Injection to improve cybersecurity. The preliminary research results were presented at the College of Science Student Research Day on May 6, 2016.
“Datiphy’s donation to SJSU continues to be a vivid example of industry and academia working together to solve important issues such as cybersecurity and big data analytics,” said Professor Moh, Professor and Director of Cybersecurity Certificates, “Using Datiphy’s DatiDNA, we are excited that our students are able to design a concrete cybersecurity project and produce preliminary results in a short period of time. Speaking on behalf of the Department of Computer Science, we anticipate our collaboration and research will make an impact in cybersecurity, big data education, and the industry.”
The research involved the generation, capture, parsing, and analyzing of SQL Injections and then using the results to create IDS rules that could be propagated to other server nodes on the network. SQL Injections are one of the most costly attack vectors being experienced by organizations of all sizes leading to monetary loss and reputation damage. The results showed that a system based on machine learning was capable of gaining insight into attacks for future distribution to intrusion detection tools.
“While there is still more testing to be done, the collaboration between SJSU and Datiphy has proved valuable to future experimentation in machine learning techniques,” stated Dr. Jason Yao, VP of Business Development, “we are excited at the opportunity to sponsor the Department of Computer Science and look forward to ongoing synergy to advance initiatives used to thwart cyber-criminals and malicious activities.”
Founded in 2015 in San Jose, CA, the Datiphy solution assigns a risk score to every piece of sensitive data within an organization. The key technology is its Adaptive Data Behavioral Model™ (also called DatiDNA™) which provides risk assessments by analyzing database transactions in real-time. Our highly scalable solution consists of Host and Network Agents that deliver in-depth activity monitoring of databases. The enterprise level platform uses behavioral analytics, and data-centric auditing and protection capabilities to mitigate risk.