Suaad Alarifi

Dr. Suaad Alarifi

orcid

Research Focus & Metrics

Academic Career Length

5Years (2022-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
Verified
Journal Article
Open access
PDF file
MAMaha Saad Alqhtani
Maha Saad Alqhtani
DADaniyal Alghazzawi
Daniyal Alghazzawi
SASuaad Alarifi
Suaad Alarifi
An SQL injection attack, usually occur when the attacker(s) modify, delete, read, and copy data from database servers and are among the most damaging of web application attacks. A successful SQL injection attack can affect all aspects of security, including confidentiality, integrity, and data availability. SQL (structured query language) is used to represent queries to database management systems. Detection and deterrence of SQL injection attacks, for which techniques from different areas can be applied to improve the detect ability of the attack, is not a new area of research but it is still relevant. Artificial intelligence and machine learning techniques have been tested and used to control SQL injection attacks, showing promising results. The main contribution of this paper is to cover relevant work related to different machine learning and deep learning models used to detect SQL injection attacks. With this systematic review, we aims to keep researchers up-to-date and contribute to the understanding of the intersection between SQL injection attacks and the artificial intelligence field.

26 July 2023 in Mathematics
Verified
Journal Article
Open access
PDF file
MAMaha Saad Alqhtani
Maha Saad Alqhtani
DADaniyal Alghazzawi
Daniyal Alghazzawi
SASuaad Alarifi
Suaad Alarifi
SQL injection attacks are one of the most common types of attacks on Web applications. These attacks exploit vulnerabilities in an application’s database access mechanisms, allowing attackers to execute unauthorized SQL queries. In this study, we propose an architecture for detecting SQL injection attacks using a recurrent neural network autoencoder. The proposed architecture was trained on a publicly available dataset of SQL injection attacks. Then, it was compared with several other machine learning models, including ANN, CNN, decision tree, naive Bayes, SVM, random forest, and logistic regression models. The experimental results showed that the proposed approach achieved an accuracy of 94% and an F1-score of 92%, which demonstrate its effectiveness in detecting QL injection attacks with high accuracy in comparison to the other models covered in the study.

14 August 2023 in Digital
Verified
Journal Article
Open access
PDF file
NRNisha Rawindaran
Nisha Rawindaran
LNLiqaa Nawaf
Liqaa Nawaf
SASuaad Alarifi
Suaad Alarifi
DADaniyal Alghazzawi
Daniyal Alghazzawi
FCFiona Carroll
Fiona Carroll
CHChaminda Thushara Hewage
Chaminda Thushara Hewage
The emergence of Industry 5.0 has revolutionized technology by integrating physical systems with digital networks. These advancements have also led to an increase in cyber threats, posing significant risks, particularly for small and medium-sized enterprises (SMEs). This research investigates the resistance of SMEs in Saudi Arabia and the United Kingdom (UK) to cyber security measures within the context of Industry 5.0, with a specific focus on governance and policy. It explores the cultural and economic factors contributing to this resistance, such as limited awareness of cyber security risks, financial constraints, and competing business priorities. Additionally, the study examines the role of government policies and regulations in promoting cyber security practices among SMEs and compares the approaches adopted by Saudi Arabia and the UK. By employing a mixed methods analysis, including interviews with SME owners and experts, the research highlights challenges and opportunities for improving cyber security governance and policy in both countries. The findings emphasize the need for tailored solutions due to the differing cultural and economic contexts between Saudi Arabia and the UK. Specifically, the study delves into the awareness and implementation of cyber security measures, focusing on SMEs in Saudi Arabia and their adherence to the Essential Cyber Security Controls (ECC-1:2018) guidelines. Furthermore, it examines the existing cyber security awareness practices and compliance in the UK, while also comparing official guidance documents aimed at supporting SMEs in achieving better cyber security practices. Based on the analysis, greater engagement with these documents is recommended in both countries to foster awareness, confidence, and compliance among SMEs, ultimately enhancing their cyber security posture. This paper offers a comparative research study on governance and policy between Saudi Arabia and the UK, presenting a set of recommendations to strengthen cyber security awareness and education, fortify regulatory frameworks, and foster public–private partnerships to combat cyber security threats in the Industry 5.0 landscape.

11 July 2023 in Preprints.org
Verified
Preprint
Open access
PDF file
MAMaha Saad Alqhtani
Maha Saad Alqhtani
DADaniyal Alghazzawi
Daniyal Alghazzawi
SASuaad Alarifi
Suaad Alarifi
SQL injection attacks are one of the most common types of attacks on web applications. These attacks exploit vulnerabilities in the application’s database access mechanisms, allowing attackers to execute unauthorized SQL queries. In this study, we propose an architecture for detecting SQL injection attacks using a recurrent neural network (RNN) autoencoder. The proposed architecture was trained on a publicly available dataset of SQL injection attacks. Then compared with several other machine learning models, including ANN, CNN, Decision Tree, Naïve Bayes, SVM, Random Forest, and Logistic Regression. The experimental result showed that the proposed approach achieved an accuracy of 94% and an F1 score of 92%, which demonstrate its effectiveness in detecting QL injection attacks with high accuracy in comparison with other models covered in the study.

27 September 2024 in Journal of Ecohumanism
Verified
Journal Article
Open access
PDF file
SASuaad Alarifi
Suaad Alarifi
DADania Aljeaid
Dania Aljeaid
Phishing attacks exploit social engineering to deceive users, potentially leading to data breaches, financial losses, or, worse, identity theft. To counter these threats, Saudi Arabia has recently implemented robust initiatives, including awareness campaigns, regulatory measures, and new legislation aimed at phishing prevention. This cross-sectional study, as part of an ongoing longitudinal series, assesses the effectiveness of these efforts by comparing data from phishing identification surveys conducted in 2018 and 2022. The findings indicate a 632% increase in phishing attempts reported by Saudi users, accompanied by notable gains in user awareness and skepticism. However, the success rates of these attacks remain unclear, highlighting the need for continued assessment of user resilience. The study also identifies evolving phishing tactics, offering strategic insights to strengthen anti-phishing measures in Saudi Arabia and guide global efforts against similar threats.