Query generalization for prevention of injection attacks

A system, comprising:

• a query analyzer repository configured to store:
• a query filter list comprising a generalized query, and
• a set of training queries, each training query comprising a predicate and one or more accessed columns returned from evaluating the predicate;
• a computer processor;
• and
• a query filter list generator executing on the computer processor configured to:
• transform the set of training queries into a structure, the structure relating individually, for an accessed column and a training query, the predicate and a correlation value to the accessed column,
• normalize the structure into a normalized structure, the normalized structure grouping entries in the structure according to accessed column,
• generate a generalized query from the normalized structure, and
• add the generalized query to a query filter list.

A method, comprising:

• receiving a target query;
• comparing the target query to a generalized query in a query filter list to obtain a comparison result, wherein the query filter list is generated by generalizing a set of training queries into the generalized query;
• and
• making a determination whether to execute the target query based on the comparison result.