A Survey on the Detection of SQL Injection Attacks and Their Countermeasures

Abstract

The Structured Query Language (SQL) Injection continues to be one of greatest security risks in the world according to the Open Web Application Security Project's (OWASP) [1] Top 10 Security vulnerabilities 2013. The ease of exploitability and severe impact puts this attack at the top. As the countermeasures become more sophisticated, SOL Injection Attacks also continue to evolve, thus thwarting the attempt to eliminate this attack completely. The vulnerable data is a source of worry for government and financial institutions. In this paper, a detailed survey of different types of SQL Injection and proposed methods and theories are presented, along with various tools and their efficiency in intercepting and preventing SQL attacks.

Models and scenarios of implementation of threats for internet resources

“…Вредоносные SQL-операторы могут быть введены в уязвимое приложение с использованием множества различных механизмов и сценариев ввода. В работе [2] были классифицированы различные сценарии. Рассмотрим наиболее распространенные из них.…”

Novel Approaches for Applying Linguistic Processing Techniques Based on Pattern Recognition and Machine Learning

“…Nagpal et al [12] provide a detailed survey of Structured Query Language (SQL) injection according to different types. SOL injection attacks are one of the greatest concerns in addressing security risks [13].…”