Discussion on the Detection and Prevention of SQL Injection

Abstract:

With the development and popularization of the Internet ,a number of web sites based on Web Server Language and back-end database schema have occurred,and their security becomes more severe.Aiming at the security problems of websites, this paper introduces the attack method--SQL injection,which has the maximum harmfulness to websites,also briefly presents the principle and process of SQL injection, in addition, elaborates and analyzes the detection methods and defensive measures of SQL Injection vulnerability in detail.

• Periodical: Advanced Materials Research (Volumes 287-290)
• Pages: 3047-3050
• DOI: https://doi.org/10.4028/www.scientific.net/AMR.287-290.3047
• Online since: July 2011
• Authors: Xing Zhong Zhang, Xiao Jie Zhang
• Keywords: Detection, Injection Mechanism, Prevention, Sql Injection Attack, Sql Injection Vulnerability

References

[1] H.B.MA, W.H. Zang, C.Li and M.J. Zhou:J. Computer Knowledge and Technology,No.11(2007), pp.1270-1271.(In Chinese)

[2] http://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project .

[3] B.Zhang:J. Information Security and Communications Privacy,No.5(2010),pp.90-91.(In Chinese)

[4] S.H. Wang and X.Y. Zhang:J. Journal of Hubei University(Natural Science), Vol.32,No.3(2010), pp.269-270.(In Chinese)

[5] G.F. Yin:J.Henan Science,Vol.27,No.3(2009),pp.316-317.(In Chinese)

[6] X.Fang:J. Fujian Computer,Vol.26,No.4(2010),pp.49-50.(In Chinese)