SQL injection attack detection using fingerprints and pattern matching technique

Appiah, Benjamin; Opoku-Mensah, Eugene; Qin, Zhiguang

doi:10.1109/icsess.2017.8342983

Cited by 18 publications

(11 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, the technique can only prevent Boolean-based SQL injection attack. Similar technique using instruction set randomization was also reported in [13][14][15] Similarly, a technique to prevent SQL injection using ASCII codes was proposed by Srivastava. User's input was first converted to ASCII values before saving them in the database.…”

Section: Related Workmentioning

confidence: 72%

A novel technique to prevent SQL injection and cross-site scripting attacks using Knuth-Morris-Pratt string match algorithm

Abikoye

Abubakar

Dokoro

et al. 2020

EURASIP J. on Info. Security

View full text Add to dashboard Cite

Structured Query Language (SQL) injection and cross-site scripting remain a major threat to data-driven web applications. Instances where hackers obtain unrestricted access to back-end database of web applications so as to steal, edit, and destroy confidential data are increasing. Therefore, measures must be put in place to curtail the growing threats of SQL injection and XSS attacks. This study presents a technique for detecting and preventing these threats using Knuth-Morris-Pratt (KMP) string matching algorithm. The algorithm was used to match user's input string with the stored pattern of the injection string in order to detect any malicious code. The implementation was carried out using PHP scripting language and Apache XAMPP Server. The security level of the technique was measured using different test cases of SQL injection, cross-site scripting (XSS), and encoded injection attacks. Results obtained revealed that the proposed technique was able to successfully detect and prevent the attacks, log the attack entry in the database, block the system using its mac address, and also generate a warning message. Therefore, the proposed technique proved to be more effective in detecting and preventing SQL injection and XSS attacks

show abstract

Section: Related Workmentioning

confidence: 72%

A novel technique to prevent SQL injection and cross-site scripting attacks using Knuth-Morris-Pratt string match algorithm

Abikoye

Abubakar

Dokoro

et al. 2020

EURASIP J. on Info. Security

View full text Add to dashboard Cite

show abstract

“…Basic indexing strategies have long been a fundamental component of SQL query optimization. Traditional indexing methods, such as B-tree and hash indexes, provide efficient access paths to data by maintaining sorted structures or direct mappings, respectively (Appiah et al, 2017). These indexes significantly improve query performance by reducing the amount of data that needs to be scanned during query execution.…”

Section: Basic Indexing Strategiesmentioning

confidence: 99%

Untitled

2024

AJBAIS

View full text Add to dashboard Cite

“…Appiah et al [48] proposed a signature-based detection framework for SQL injection attack. In this proposed framework, pattern matching and the fingerprint method are integrated to differentiate valid SQL queries from malevolent queries.…”

Section: B Database 1) Database Attacksmentioning

confidence: 99%

Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain

et al. 2019

View full text Add to dashboard Cite

Recently, an increasing number of cyber-attacks in the medical field has resulted in great losses in the health care industry, since medical information plays an essential role in human health. To introduce a comprehensive survey about possible cyber-attacks and solutions for these attacks, our paper first presents a brief overview of the necessary background of the dataflow in the medical domain and then identifies the vulnerabilities in each stage of the dataflow. Then, according to the weaknesses identified in the medical system, a classification of cyber-attacks is presented. Additionally, the paper presents research on previous work that focuses on solving these cyber-attacks and identifies the strengths and limitations of the solutions for each attack. More importantly, for data storage assurance, our paper discusses several cybersecurity architectures for the medical domain from the existing literature. The countermeasures from previous papers and architectures that are still weak in terms of resource depletion, attack reduction, applicability, etc. are addressed. Finally, the paper discusses and recommends solutions for future work to decrease cyber-attacks in the medical field so that human health can be guaranteed. INDEX TERMS Dataflow, medical field, cyber-attacks, architectures, cybersecurity, threats, vulnerabilities.

show abstract

SQL injection attack detection using fingerprints and pattern matching technique

Cited by 18 publications

References 13 publications

A novel technique to prevent SQL injection and cross-site scripting attacks using Knuth-Morris-Pratt string match algorithm

A novel technique to prevent SQL injection and cross-site scripting attacks using Knuth-Morris-Pratt string match algorithm

Untitled

Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain

Contact Info

Product

Resources

About