• DocumentCode
    3267019
  • Title

    Comparison of SQL injection detection and prevention techniques

  • Author

    Tajpour, Atefeh ; Massrum, Maslin ; Heydari, Mohammad Zaman

  • Author_Institution
    Center for Adv. Software Eng., Univ. Technol. Malaysia, Kuala Lumpur, Malaysia
  • Volume
    5
  • fYear
    2010
  • fDate
    22-24 June 2010
  • Abstract
    Database driven web application are threaten by SQL Injection Attacks (SQLIAs) because this type of attack can compromise confidentiality and integrity of information in databases. Actually, an attacker intrudes to the web application database and consequently, access to data. For stopping this type of attack different approaches have been proposed by researchers but they are not enough because most of implemented approaches cannot stop all type of attacks. In this paper all type of SQL injection attack and also different techniques which can detect or prevent them are presented. Finally we evaluate these approaches against all types of SQL injection attacks.
  • Keywords
    SQL; Web services; data integrity; database management systems; security of data; SQL injection attack; SQL injection detection; SQL injection prevention; database driven Web application; information integrity; structural query language; Application software; Books; Computer science education; Database languages; Educational technology; Engineering management; Logic; Shape; Software engineering; Technology management; SQL Injection Attacks; detection; prevention;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Education Technology and Computer (ICETC), 2010 2nd International Conference on
  • Conference_Location
    Shanghai
  • Print_ISBN
    978-1-4244-6367-1
  • Type

    conf

  • DOI
    10.1109/ICETC.2010.5529788
  • Filename
    5529788