Image de couverture de livre

Are Your LLM-based Text-to-SQL Models Secure? Exploring SQL Injection via Backdoor Attacks

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Lin, Meiyu, Zhang, Haichuan, Lao, Jiale, Li, Renyuan, Zhou, Yuanchun, Yang, Carl, Cao, Yang, Tang, Mingjie
Format:	Preprint
Publié:	2025
Sujets:	Cryptography and Security Databases
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

Attack as Defense: Run-time Backdoor Implantation for Image Content Protection
par: Zhang, Haichuan, et autres
Publié: (2024)

Can You Trust the Vectors in Your Vector Database? Black-Hole Attack from Embedding Space Defects
par: Li, Hanxi, et autres
Publié: (2026)

On the Security Vulnerabilities of Text-to-SQL Models
par: Peng, Xutan, et autres
Publié: (2022)

FHE-SQL: Fully Homomorphic Encrypted SQL Database
par: Tseng, Po-Yu, et autres
Publié: (2025)

RADAR: Exposing Unlogged NoSQL Operations
par: Nissan, Mahfuzul I., et autres
Publié: (2026)

From Prompt Injections to SQL Injection Attacks: How Protected is Your LLM-Integrated Web Application?
par: Pedro, Rodrigo, et autres
Publié: (2023)

FuzzySQL: Uncovering Hidden Vulnerabilities in DBMS Special Features with LLM-Driven Fuzzing
par: Chen, Yongxin, et autres
Publié: (2026)

DePLOI: Applying NL2SQL to Synthesize and Audit Database Access Control
par: Subramaniam, Pranav, et autres
Publié: (2024)

PoneglyphDB: Efficient Non-interactive Zero-Knowledge Proofs for Arbitrary SQL-Query Verification
par: Gu, Binbin, et autres
Publié: (2024)

MemTraceDB: Reconstructing MySQL User Activity Using ActiviTimeTrace Algorithm
par: Nissan, Mahfuzul I.
Publié: (2025)

Leveraging large language models for SQL behavior-based database intrusion detection
par: Shlezinger, Meital, et autres
Publié: (2025)

Blockchain-based vs. SQL Database Systems for Digital Twin Evidence Management: A Comparative Forensic Analysis
par: Franken, Boyd, et autres
Publié: (2025)

DPSQL+: A Differentially Private SQL Library with a Minimum Frequency Rule
par: Matsumoto, Tomoya, et autres
Publié: (2026)

Algorithmic Complexity Attacks on Dynamic Learned Indexes
par: Yang, Rui, et autres
Publié: (2024)

Enabling Efficient Attack Investigation via Human-in-the-Loop Security Analysis
par: Tsegai, Saimon Amanuel, et autres
Publié: (2022)

MaskSQL: Safeguarding Privacy for LLM-Based Text-to-SQL via Abstraction
par: Abedini, Sepideh, et autres
Publié: (2025)

ProGQL: A Provenance Graph Query System for Cyber Attack Investigation
par: Shao, Fei, et autres
Publié: (2025)

GPM: The Gaussian Pancake Mechanism for Planting Undetectable Backdoors in Differential Privacy
par: Sun, Haochen, et autres
Publié: (2025)

Defense against Poisoning Attacks under Shuffle-DP
par: Wang, Siyi, et autres
Publié: (2026)

Adversarial SQL Injection Generation with LLM-Based Architectures
par: Karakoc, Ali, et autres
Publié: (2026)

VulGD: A LLM-Powered Dynamic Open-Access Vulnerability Graph Database
par: Do, Luat, et autres
Publié: (2026)

SQL Injection Jailbreak: A Structural Disaster of Large Language Models
par: Zhao, Jiawei, et autres
Publié: (2024)

Secure Query Processing with Linear Complexity
par: Luo, Qiyao, et autres
Publié: (2024)

PACE: Poisoning Attacks on Learned Cardinality Estimation
par: Zhang, Jintao, et autres
Publié: (2024)

Security in IS and social engineering -- an overview and state of the art
par: Sèdes, Florence
Publié: (2024)

SPECIAL: Synopsis Assisted Secure Collaborative Analytics
par: Wang, Chenghong, et autres
Publié: (2024)

Data Poisoning Attacks to Local Differential Privacy Protocols for Graphs
par: He, Xi, et autres
Publié: (2024)

TPSQLi: Test Prioritization for SQL Injection Vulnerability Detection in Web Applications
par: Yang, Guan-Yan, et autres
Publié: (2025)

ORQ: Complex Analytics on Private Data with Strong Security Guarantees
par: Baum, Eli, et autres
Publié: (2025)

Interactive Trimming against Evasive Online Data Manipulation Attacks: A Game-Theoretic Approach
par: Fu, Yue, et autres
Publié: (2024)

Reflex: Faster Secure Collaborative Analytics via Controlled Intermediate Result Size Disclosure
par: Gu, Long, et autres
Publié: (2025)

FRAG: Toward Federated Vector Database Management for Collaborative and Secure Retrieval-Augmented Generation
par: Zhao, Dongfang
Publié: (2024)

Femur: A Flexible Framework for Fast and Secure Querying from Public Key-Value Store
par: Zhang, Jiaoyi, et autres
Publié: (2025)

Towards Privacy-Preserving Range Queries with Secure Learned Spatial Index over Encrypted Data
par: Wang, Zuan, et autres
Publié: (2025)

Enhancing SQL Injection Detection and Prevention Using Generative Models
par: Dasari, Naga Sai, et autres
Publié: (2025)

HexaMorphHash HMH- Homomorphic Hashing for Secure and Efficient Cryptographic Operations in Data Integrity Verification
par: Das, Krishnendu
Publié: (2025)

Implementing a Scalable, Redeployable and Multitiered Repository for FAIR and Secure Scientific Data Sharing: The BIG-MAP Archive
par: Granata, Valeria, et autres
Publié: (2025)

DP-S4S: Accurate and Scalable Select-Join-Aggregate Query Processing with User-Level Differential Privacy
par: Qiu, Yuan, et autres
Publié: (2026)

UltraClean: A Simple Framework to Train Robust Neural Networks against Backdoor Attacks
par: Zhao, Bingyin, et autres
Publié: (2023)

AdvSQLi: Generating Adversarial SQL Injections against Real-world WAF-as-a-service
par: Qu, Zhenqing, et autres
Publié: (2024)