System architecture for SQL injection and insider misuse detection system for DBMS

Asmawi, Aziah; Sidek, Zailani Mohamed; Razak, Shukor Abd

doi:10.1109/itsim.2008.4631942

Cited by 11 publications

(11 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The effectiveness of detection largely depends on the accuracy of the learning algorithms. The approach in [34] focuses on securing the web application from external and internal attacks. SQL Injection and Insider Misuse Detection System (SIIMDS) is a technique that takes advantage of both misuse detection methods and anomaly detection methods to reduce the risk resulting from SQL injection attack.…”

Section: Related Workmentioning

confidence: 99%

Neutralizing SQL Injection Attack Using Server Side Code Modification in Web Applications

Dalai

Jena

2017

Security and Communication Networks

View full text Add to dashboard Cite

Reports on web application security risks show that SQL injection is the top most vulnerability. The journey of static to dynamic web pages leads to the use of database in web applications. Due to the lack of secure coding techniques, SQL injection vulnerability prevails in a large set of web applications. A successful SQL injection attack imposes a serious threat to the database, web application, and the entire web server. In this article, the authors have proposed a novel method for prevention of SQL injection attack. The classification of SQL injection attacks has been done based on the methods used to exploit this vulnerability. The proposed method proves to be efficient in the context of its ability to prevent all types of SQL injection attacks. Some popular SQL injection attack tools and web application security datasets have been used to validate the model. The results obtained are promising with a high accuracy rate for detection of SQL injection attack.

show abstract

Section: Related Workmentioning

confidence: 99%

Neutralizing SQL Injection Attack Using Server Side Code Modification in Web Applications

Dalai

Jena

2017

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

“…Fig 1 shows some critical areas need to be considered in Database Security [5] and how different researcher use different techniques and methods to mitigate these risks. www.ijacsa.thesai.org Used for both insider and outsider attacks [20] Auditing Method Used for both insider and outsider attacks [24,27] Hackers exploit these critical areas and security holes in a database application to gain database administrator (DBA) level grants and privileges to access sensitive data and cause a denial of service (DOS) attacks. Following are the security threats that need attention [10].…”

Section: A Self-protection In Dbmsmentioning

confidence: 99%

“…[ [20] Discuss database security threats against both internal and external threats. Proposed SIIMDS to detect both internal and external attacks.…”

Section: Both For Inside and Outside Attacksmentioning

confidence: 99%

Self-Protection against Insider Threats in DBMS through Policies Implementation

Zaman¹,

Raza²,

Malik³

et al. 2017

ijacsa

View full text Add to dashboard Cite

Abstract-In today's world, information security of an organization has become a major challenge as well as a critical business issue. Managing and mitigating these internal or external security related issues, organizations hire highly knowledgeable security expert persons. Insider threats in database management system (DBMS) are inherently a very hard problem to address. Employees within the organization carry out or harm organization data in a professional manner. To protect and monitor organization information from insider user in DBMS, the organization used different techniques, but these techniques are insufficient to secure their data. We offer an autonomous approach to self-protection architecture based on policy implementation in DBMS. This research proposes an autonomic model for protection that will enforce Access Control policies, Database Auditing policies, Encryption policies, user authentication policies, and database configuration setting policies in DBMS. The purpose of these policies to restrict insider user or Database Administrator (DBA) from malicious activities to protect data.

show abstract

“…Threat in database is defined by Aziah Asmawi in [5] as a set of policies, measures and mechanisms to provide safety, availability and integrity of data and to combat possible attacks on the system from outsiders as well as insiders, both accidental and malicious. Aziah Asmawi has mentioned about SQL injection which can be executed by two ways by unauthorized user accessing the database via webpage connected network:…”

Section: About the Threats In Database Management System (Tdbms)mentioning

confidence: 99%

“…The second security issue of database management systems has various fields of database integrity as described in [5]:…”

Section: Jajodia-dogan Security Modelmentioning

confidence: 99%

Security Issues and Their Techniques in DBMS - A Novel Survey

Muntjir¹,

Aljahdali²,

Asadullah³

et al. 2014

IJCA

View full text Add to dashboard Cite

Nowadays a Database security has become an important issue in technical world. The main objective of database security is to forbid unnecessary information exposure and modification data while ensuring the availability of the needed services. A numbers of security methods have been created for protecting the databases. Many security models have been developed based on different security aspects of database. All of these security methods are useful only when the database management system is designed and developing for protecting the database. Recently the growth of web application with database at its backend Secure Database Management System is more essential than only a Secure Database. Therefore this paper highlight on the Threats, Security Methods and Vulnerabilities in Database Management System with the help of survey performed on the field of secure databases.

show abstract

System architecture for SQL injection and insider misuse detection system for DBMS

Cited by 11 publications

References 9 publications

Neutralizing SQL Injection Attack Using Server Side Code Modification in Web Applications

Neutralizing SQL Injection Attack Using Server Side Code Modification in Web Applications

Self-Protection against Insider Threats in DBMS through Policies Implementation

Security Issues and Their Techniques in DBMS - A Novel Survey

Contact Info

Product

Resources

About