Procedia Engineering · 2012 · 35 citations · 5 references
ComputingComputer ScienceCybersecurityComputer SecurityVulnerability AnalysisWeb SecurityDatabase SecurityInjection VulnerabilitiesInput ValidationInput Validation VulnerabilitiesSql InjectionWeb Application VulnerabilitiesAuthentication LogicInjection Attack MitigationInjection Attack PreventionInjection AttacksLength ValidationSql Injection DetectionUnauthorized Access DetectionUnauthorized Access Prevention
Web applications, such as online banking and email, increasingly expose users to SQL injection vulnerabilities that can leak data, bypass authentication, or create unauthorized accounts. The proposed approach employs four filtration techniques—Malicious Text Detector, Constraint Validation, Query Length Validation, and Text‑Based Key Generator—to detect and prevent SQL injection attacks.
With the rise of the Internet, web applications, such as online banking and web-based email, have become integral to many people's daily lives. Web applications have brought with them new classes of computer security vulnerabilities, such as SQL injection. It is a class of input validation based vulnerabilities. Typical uses of SQL injection leak confidential information from a database, by-pass authentication logic, or add unauthorized accounts to a database. This security prevents the unauthorized access to your database and also it prevents your data from being altered or deleted by users without the appropriate permissions. Malicious Text Detector, Constraint Validation, Query length validation and Text based Key Generator are the four types of filtration technique used to detect and prevent the SQL Injection Attacks from accessing the database
5
William G. J. Halfond, Alessandro Orso · 2005 · 525 citations
The essence of command injection attacks in web applications
Zhendong Su, Gary Wassermann · 2006 · 518 citations
Advanced SQL Injection In SQL Server Applications
Chris Anley · 2002 · 260 citations