A hybrid method for detection and prevention of SQL injection attacks
Title | A hybrid method for detection and prevention of SQL injection attacks |
Publication Type | Conference Paper |
Year of Publication | 2017 |
Authors | Ghafarian, A. |
Conference Name | 2017 Computing Conference |
Keywords | access content, Collaboration, common gateway interface, Computer hacking, data mining, database design, database driven web applications, database management systems, Databases, detection, dynamic, hacker, Human Behavior, hybrid method, hybrid SQLIA, Internet, policy, policy-based governance, Policy-Governed Secure Collaboration, Prevention, privacy, pubcrawl, Resiliency, Runtime, security of data, sensitive information, serious security threat, Servers, SQL, SQL Injection, SQL injection attack, SQL statements, SQLIA, static, Web applications |
Abstract | SQL injection attack (SQLIA) pose a serious security threat to the database driven web applications. This kind of attack gives attackers easily access to the application's underlying database and to the potentially sensitive information these databases contain. A hacker through specifically designed input, can access content of the database that cannot otherwise be able to do so. This is usually done by altering SQL statements that are used within web applications. Due to importance of security of web applications, researchers have studied SQLIA detection and prevention extensively and have developed various methods. In this research, after reviewing the existing research in this field, we present a new hybrid method to reduce the vulnerability of the web applications. Our method is specifically designed to detect and prevent SQLIA. Our proposed method is consists of three phases namely, the database design, implementation, and at the common gateway interface (CGI). Details of our approach along with its pros and cons are discussed in detail. |
URL | https://ieeexplore.ieee.org/document/8252192 |
DOI | 10.1109/SAI.2017.8252192 |
Citation Key | ghafarian_hybrid_2017 |
- serious security threat
- Policy-Governed Secure Collaboration
- Prevention
- privacy
- pubcrawl
- Resiliency
- Runtime
- security of data
- sensitive information
- policy-based governance
- Servers
- SQL
- SQL injection
- SQL injection attack
- SQL statements
- SQLIA
- static
- web applications
- detection
- collaboration
- common gateway interface
- Computer hacking
- Data mining
- database design
- database driven web applications
- database management systems
- Databases
- access content
- dynamic
- Hacker
- Human behavior
- hybrid method
- hybrid SQLIA
- internet
- Policy