Case study on SQL injection security attack

• Main Author: Low, Kok Jun.
• Other Authors: Tan Hee Beng Kuan
• Format: Final Year Project
• Language: English
• Published: 2010
• Subjects: DRNTU::Engineering::Electrical and electronic engineering::Computer hardware, software and systems
• Online Access: http://hdl.handle.net/10356/42518
• Institution: Nanyang Technological University

SQL injection attacks pose a serious security threat to Web applications. They allow hackers to obtain unrestricted access to databases underlying the applications and to the potentially sensitive information these database contain. Although researchers have proposed various methods to address the SQL injection problem, but failed to address the full scope of the problem as the method can only solve a subset of the wide range of SQL injection techniques that can be exploited by hackers. To address this problem, this report presents an extensive review of the different types of SQL injection attacks known to date. In this report, description and example of one presented to illustrate how attacks could be exploited and detected. Prevention techniques against various SQL injection attacks are also discussed.