A Survey of SQL Injection Attack Detection and Prevention
A Survey of SQL Injection Attack Detection and Prevention作者机构：Assistant Professor Head of Department of Mathematics Faculty of Science Suez University Suez Egypt Demonstrator of Computer Science Information System Institute Suez Egypt Lecturer of Computer Science Faculty of Science Suez University Suez Egypt Professor of Computer Science Faculty of Computers & Information Assiut University Assiut Egypt
出 版 物：《Journal of Computer and Communications》 (电脑和通信（英文）)
年 卷 期：2014年第2卷第8期
页 面：1-9页
学科分类：1002[医学-临床医学] 100214[医学-肿瘤学] 10[医学]
主 题：SQL Injection Database Security Attack Authentication
摘 要：Structured Query Language Injection Attack (SQLIA) is the most exposed to attack on the Internet. From this attack, the attacker can take control of the database therefore be able to interpolate the data from the database server for the website. Hence, the big challenge became to secure such website against attack via the Internet. We have presented different types of attack methods and prevention techniques of SQLIA which were used to aid the design and implementation of our model. In the paper, work is separated into two parts. The first aims to put SQLIA into perspective by outlining some of the materials and researches that have already been completed. The section suggesting methods of mitigating SQLIA aims to clarify some misconceptions about SQLIA prevention and provides some useful tips to software developers and database administrators. The second details the creation of a filtering proxy server used to prevent a SQL injection attack and analyses the performance impact of the filtering process on web application.
维普期刊数据库