NoSQL systems are becoming more popular due to their inherent advantages and
solutions it provides to the limits of a relational database. However, despite its benefits, it comes
with security challenges. In this paper, an input validation mechanism architecture is proposed for
Mongo DB to detect and prevent NoSQL injection attacks, the mechanism employs a
Deterministic Finite Automaton (DFA) approach to detect and prevent attacks on NoSQL
systems. Furthermore, a security comparison of some NoSQL systems is provided based on recent
literature. The security features compared are authentication, authorization, data encryption and
input validation. The proposed mechanism will improve the security of Mongo DB system
because invalid inputs requests will be detected and prevented from being processed.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.