Case study on SQL injection security attack

SQL injection attacks pose a serious security threat to Web applications. They allow hackers to obtain unrestricted access to databases underlying the applications and to the potentially sensitive information these database contain. Although researchers have proposed various methods to address the S...

Full description

Saved in:
Bibliographic Details
Main Author: Low, Kok Jun.
Other Authors: Tan Hee Beng Kuan
Format: Final Year Project
Language:English
Published: 2010
Subjects:
Online Access:http://hdl.handle.net/10356/42518
Tags: Add Tag
No Tags, Be the first to tag this record!
Institution: Nanyang Technological University
Language: English
Description
Summary:SQL injection attacks pose a serious security threat to Web applications. They allow hackers to obtain unrestricted access to databases underlying the applications and to the potentially sensitive information these database contain. Although researchers have proposed various methods to address the SQL injection problem, but failed to address the full scope of the problem as the method can only solve a subset of the wide range of SQL injection techniques that can be exploited by hackers. To address this problem, this report presents an extensive review of the different types of SQL injection attacks known to date. In this report, description and example of one presented to illustrate how attacks could be exploited and detected. Prevention techniques against various SQL injection attacks are also discussed.