ResearchBib Share Your Research, Maximize Your Social Impacts
Sign for Notice Everyday Sign up >> Login

Analysis of SQL Injection Attacks on Website Service

Journal: Bit-Tech (Vol.1, No. 1)

Publication Date:

Authors : ;

Page : 26-33

Keywords : Web security; Website; SQL Injection;

Source : Downloadexternal Find it from : Google Scholarexternal

Abstract

Among the various types of software vulnerabilities, command injection is the most common type of threat in web applications. In command injection, SQL injection type of attacks are extremely prevalent, and ranked as the second most common form of attack on web. SQL injection attacks involve the construction of application's input data that will result in the execution of malicious SQL statements. Most of the SQL injection detection techniques involve the code to be written along with the actual scripting code. These techniques do not detect errors in SQL statements. Hence, this paper proposes a mechanism to identify invalid SQL statements, to analyze the query for invalid non SQL key words, and to customize the captured errors. This mechanism is different from others by means of separation of the main scripting code and SQL injection code.

Last modified: 2019-04-01 14:57:25