Prevention of SQL Injection Attack by Using Black Box Testing

Thombare, Bhakti M; Soni, Rashmi

doi:10.1145/3491003.3493233

Cited by 5 publications

(3 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…State-of-the-art research of SQL Injection Solutions Figure 6 demonstrates the distribution of SQL Injection techniques used in reducing web application vulnerabilities. Multifarious researchers [83]- [97] implement a pattern matching algorithm to detect and prevent SQL Injection attacks. All applied dynamic analysis except [91], [98]- [100] whom used static analysis.…”

Section: ) Sql Injectionmentioning

confidence: 99%

“…They check user SQL input and find whether they are SQL injected or not using various approaches viz. scanner [92], [94], [95], [97], regular expression [86], string pattern [88] [100], keyword matching [96], no sanitization [84], sanitizing or blocking [87] [101], access control methods [90], and with the cooperation of intrusion detection systems (IDS) [83] [89]. Figure 7 depicts the distribution of the different pattern matching techniques used in SQLI.…”

Section: ) Sql Injectionmentioning

confidence: 99%

“…Their method lacks comparison with more advanced scanners. Recently, Thombare and Soni [97] also presented a scanner consisting of four elements: crawling by visiting URLs that talk with database, attacking by sending malicious SQL request, analysis by analyzing response page to determine if there are vulnerabilities or not, and their final component is report generation.…”

Section: ) Sql Injectionmentioning

confidence: 99%

See 2 more Smart Citations

Input Validation Vulnerabilities in Web Applications: Systematic Review, Classification, and Analysis of the Current State-of-the-Art

Faisal

Elshoush

2023

IEEE Access

View full text Add to dashboard Cite

In recent years, huge increase in attacks and data breaches is noticed. Most of the attacks are performed and focused on the vulnerabilities related to web applications. Hence, nowadays the mitigation of application vulnerabilities is an ignited research area. Thus, due to the potential high severity impacts of web application, many different approaches have been proposed in the past decades to mitigate the damages of application vulnerabilities. Static and dynamic analysis are the two main techniques used. In this paper, a new classification for web application input validation vulnerabilities is proffered. In addition, various techniques/tools that are used to detect them are analyzed and evaluated to apprehend their strengths and weaknesses. Thus, this paper provides both technical as well as literature countermeasures to input validation vulnerabilities. Moreover, various statistical distributions of the reviewed techniques were manifested and scrutinize in different aspects to reveal the perception of the prevailing techniques and the gaps in the literature. In addition, the most widespread metrics are also propounded.

show abstract