Toward an SDN-Based Web Application Firewall: Defending against SQL Injection Attacks

Web attacks pose a significant threat to enterprises, as attackers often target web applications first. Various solutions have been proposed mitigate and reduce the severity of these threats, such application firewalls (WAFs). On other hand, software-defined networking (SDN) technology has significantly improved network management operation by providing centralized control for administrators. In this work, we investigated possibility using SDN implement firewall capable detecting blocking attacks. As proof concept, designed implemented WAF detect known attack, specifically SQL injection. Our design utilized two detection methods: signatures regular expressions. The experimental results demonstrate that controller can successfully function injection Furthermore, compared ModSecurity, traditional WAF, with our SDN-based WAF. reveal system is more efficient in terms TCP ACK latency, while ModSecurity exhibits slightly lower overhead on controller.