Detailed Information
Cited 0 time in 
Cited 0 time in 
Cited 0 time in
Metadata Downloads
A novel method for SQL injection attack detection based on removing SQL query attribute values
- Authors
- Lee, Inyong; Jeong, Soonki; Yeo, Sangsoo; Moon, Jongsub
- Issue Date
- 1월-2012
- Publisher
- PERGAMON-ELSEVIER SCIENCE LTD
- Keywords
- SQL injection attack; SQL query; A combined dynamic and static method; DBMS; Web application
- Citation
- MATHEMATICAL AND COMPUTER MODELLING, v.55, no.1-2, pp.58 - 68
- Indexed
- SCIE
SCOPUS
- Journal Title
- MATHEMATICAL AND COMPUTER MODELLING
- Volume
- 55
- Number
- 1-2
- Start Page
- 58
- End Page
- 68
- ISSN
- 0895-7177
- Abstract
- SQL injection or SQL insertion attack is a code injection technique that exploits a security vulnerability occurring in the database layer of an application and a service. This is most often found within web pages with dynamic content. This paper proposes a very simple and effective detection method for SQL injection attacks. The method removes the value of an SQL query attribute of web pages when parameters are submitted and then compares it with a predetermined one. This method uses combined static and dynamic analysis. The experiments show that the proposed method is very effective and simple than any other methods. (C) 2011 Elsevier Ltd. All rights reserved.
- Files in This Item
- There are no files associated with this item.
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.