KADD

Latest Updates

[2026-06-30]: Released KADD SQL injection detection library 1.0.0. It is a hybrid detection solution based on the deterministic finite automaton (DFA) and machine learning (ML). It provides high-performance detection for SQL injection attacks and supports text feature extraction and batch inference optimization.

Project Introduction

KADD is a SQL injection detection solution of BoostIDA. It uses a hybrid detection architecture that combines the DFA and ML. The DFA engine is used for accurate SQL statement tokenization, and the ML engine is used for intelligent feature inference. This enables high-precision and low-latency detection of SQL injection attacks. This solution is optimized for Kunpeng processor features. It ensures high detection accuracy and provides simple C language APIs, which can be easily integrated into existing security protection systems.

Feature Description

Feature	Description
SQL injection detection	Provides DFA-based accurate SQL statement tokenization, 28-dimensional feature vector extraction, and ONNX-based ML inference to implement high-performance detection of SQL injection attacks.

Directory Structure

The project directory structure is as follows:

|—— assets/                  # Asset file directory
│   ├── data/                # DFA table files
│   └── model/               # ML model file
|—— config.json              # Project configuration file
|—— demo/                    # Demo programs
|—— docs/                    # Documentation directory
│   └── en/                  # English document directory
│       ├── api_reference.md # API Reference
│       ├── faq.md           # FAQs
│       ├── installation_guide.md # Installation Guide
│       ├── quick_start.md   # Quick Start
│       ├── release_notes.md # Release Notes
│       └── user_guide.md    # User Guide
|—— include/                 # Header file directory (open-source)
|—— lib/                     # Precompiled library (closed-source)
|—— tools/                   # Training tools
│   ├── dfa_compile/         # DFA compiler
│   └── model_train/         # Model training tool
|—— README.md                # Description document
|—— LICENSE                  # License
└── THIRD_PARTY_LICENSES     # Third-party licenses

Release Notes

For details about feature changes in each version, see Release Notes.

Quick Start

The quick start of KADD is implemented by using the demo examples. For details, see Quick Start.

Documents

This feature provides the following learning documents for reference.

Document	Description
Release Notes	Provides version updates of KADD.
Installation Guide	Provides the methods of deploying the KADD environment, installing dependencies, and compiling KADD.
Quick Start	Provides the quick usage of the KADD demo examples.
API Reference	Provides complete API descriptions of the DFA engine, Feature engine, ML engine, and SQLi engine of KADD.
User Guide	Provides the usage and practices of KADD.
FAQs	Lists FAQs about KADD.

Contribution Statement

If you have any questions or want to provide feedback on feature requirements and bug reports, you can submit issues. For details, see the contribution guideline.

Disclaimer

To KADD users

This project provides only reference examples and tools. You are responsible for any risks and should carefully review the following information:
- Data processing and deletion: Users are responsible for managing and deleting any data generated while using this tool. You are advised to promptly delete any related data after use to prevent information leaks.
- Data confidentiality and transmission: Users understand and agree not to share or transmit any data generated by this tool. Neither the tool nor its developers are responsible for any information leaks, data breaches, or other negative consequences.
- User input security: Users are responsible for the security of any commands they enter and for any risks or losses resulting from improper input. The tool and its developers are not liable for issues caused by incorrect command usage.
Disclaimer scope: This disclaimer applies to all individuals and entities using this tool. It is not recommended that this tool be used for any commercial purposes. By using the tool, you acknowledge and accept this statement and assume all risks and responsibilities arising from its use. If you do not agree, please stop using the tool immediately.
Before using this tool, please read and understand the preceding disclaimer. If you have any questions, contact the developer.

License

This project is licensed under BSD 3-Clause License. For details, see LICENSE.

The documents of this project are licensed under CC-BY 4.0. For details, see LICENSE.

Third-Party License

For details about the third-party libraries used in this project and their licenses, see THIRD_PARTY_LICENSES.