Comparison of SQL Injection Detection and Prevention Techniques

摘要：

Database driven web application are threaten by SQL Injection Attacks (SQLIAs) because this type of attack can compromise confidentiality and integrity of information in databases. Actually, an attacker intrudes to the web application database and consequently, access to data. For stopping this type of attack different approaches have been proposed by researchers but they are not enough because most of implemented approaches cannot stop all type of attacks. In this paper all type of SQL injection attack and also different techniques which can detect or prevent them are presented. Finally we evaluate these approaches against all types of SQL injection attacks.

关键词： SQL Injection Attacks detection prevention

作者: Atefeh Tajpour Maslin Massrum Mohammad Zaman Heydari

作者单位: Center for Advanced Software Engineering University Technology Malaysia Kuala Lumpur, Malaysia IT& Management Dep UCSI University Kuala Lumpur, Malaysia

会议类型: 国际会议

会议名称: 2010 2nd International Conference on Education Technology and Computer(第二届IEEE教育技术与计算机国际会议 ICETC 2010)

会议地点: 上海

会议语种:英文

页码: 174-179

在线出版日期: 2010-06-22（万方平台首次上网日期，不代表论文的发表时间）