SQL injection prevention system

Voitovych, Olesia; Yuvkovetskyi, O. S.; Куперштейн, Леонід

doi:10.1109/ukrmico.2016.7739642

Cited by 17 publications

(3 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Showing the comparison of similar types of attacks with the features and the result is the evaluation proves the algorithm works efficiently to detect the SQLIAs. Voitovych O.P et al [2] proposed a known approach to protect Web applications against SQL injection attacks in the article. To improve the Web software security it is developed defence mechanism that protects Web resources from SQL injection performing.…”

Section: Related Workmentioning

confidence: 99%

Vulnerability detection and prevention of SQL injection

Kumar¹,

Anaswara²

2018

IJET

View full text Add to dashboard Cite

SQL injection attack is the most serious security vulnerabilities on databases are connected with web or within an intranet, most of these vulnerabilities are affected by lack of input validation and SQL parameters are use. The attackers are trying to steal the data which was hidden and by attacking the database using the attacking technique that is called SQL injection attacks. The SQL injection attack detection and prevention technologies are experimented in this paper. There are different defence methods are used to prevent such as, parameterized statement, stored procedures and white list input validation. The comparative results of these methods are highlighted in the table with SQL injection query, prepared statement insertion and selection queries, stored procedures and modify queries. The comparison of these methods used for detection and prevention vulnerability in web server.

show abstract

Section: Related Workmentioning

confidence: 99%

Vulnerability detection and prevention of SQL injection

Kumar¹,

Anaswara²

2018

IJET

View full text Add to dashboard Cite

show abstract

“…Thus, malicious and normal queries are easily identified. Voitovych, et al (2016) andLiu, et al (2019) approached the problem by developing a software tool that incorporates a server-side language (PHP), formal language theory (regular expressions) and client-side language i.e. JavaScript.…”

Section: Introductionmentioning

confidence: 99%

A Critical Evaluation of Security Approaches for Detection and Prevention of SQL Injection Attacks in Web-Based Applications

Maina

2024

FJS

View full text Add to dashboard Cite

SQL Injection Attack (SQLIAs) is a web application attack that has been known for almost two decades, and that has been among the biggest cyber threats especially because most of the world’s population interacts with web apps in one way or the other. Over the years many methods have been developed to identify and deter SQLIAs, thereby reducing the risk on web applications. Four various methods used to identify and stop SQLIAs are reviewed, compared and critically evaluated in this paper, these include tokenization and lexicon detection process, combined static and dynamic method, novel, and search-based methods. This work further reveals the gap in current knowledge, specifically, increased efficiency can be achieved by integrating two of the most effective approaches. Furthermore, a real-world application of these methods is presented and finally, recommendations are made for further study.

show abstract

“…Similar to some evolving structures, it hasalsogained high-interest databases [2] because of the malicious users who wait to exploit their weaknesses and imperfections for their personal goals [3]. The security of databases is important and a developing concern considering the number of occurrences reported constantly [4]. The attack marks at injection focuses contain the examples of Structured Query Language (SQL) tokens and images as SQL-Injection Attacks (SQLIA)-positive while substantial web requests tend to appear as expected information from the application [5].…”

Section: Introductionmentioning

confidence: 99%

Web Based Database Security in Internet of Things Using Fully Homomorphic Encryption and Discrete Bee Colony Optimization

Raj

Prakash²,

Prince

et al. 2020

MJCS

View full text Add to dashboard Cite

Web applications are utilized on an extensive scale across the globe and it handles sensitive individual information of users. Structured Query Language (SQL) Data Inference (DI) and injection are procedures that abuse a security defenselessness occurring in the database layer of an application. This research article focuses on website page database security with the help of optimization and encryption methods for Web of Things Environments. Initially, the selected queries in webpage application are injected as per Discrete Bee Colony Optimization (DBCO) procedure. After the Proxy filtering, the injection prevention model is utilized, the injected data with various queries of different special characters are utilized. At long last, the attack gets detected depending on the user query with the assistance of query tree mechanism. Besides, an effective Fully Homomorphic Encryption (FHE) encryption is proposed in the study. From the implementation results, it is to be noted that the proposed method achieved 93.56% security level for the prevented webpage implication-based databases. The effect on the businesses must be comprehended to decrease the risk involved in SQL and DI injection assaults.

show abstract

SQL injection prevention system

Cited by 17 publications

References 1 publication

Vulnerability detection and prevention of SQL injection

Vulnerability detection and prevention of SQL injection

A Critical Evaluation of Security Approaches for Detection and Prevention of SQL Injection Attacks in Web-Based Applications

Web Based Database Security in Internet of Things Using Fully Homomorphic Encryption and Discrete Bee Colony Optimization

Contact Info

Product

Resources

About