A Novel Injection Aware Approach for the Testing of Database Applications

Databases have become an integral part of the web applications in the current world. Database based applications have brought a revolution in the domain of information technology. These applications interact with the databases using Structured Query Language (SQL) queries embedded in the code. There are automated ways to test the applications written in imperative and structured languages. However, the methodologies to test the applications with embedded SQL queries are still in the nascent phase. The SQL injection attacks have become one of the most serious security threats. Testing of these applications poses grave challenges to the engineers. In this paper, a novel approach has been proposed to test the applications in a comprehensive way. The approach is a holistic one; it tests the system under real conditions without any artifacts, to avoid potential injection attacks.