Semi-automated verification of defense against SQL injection in web applications

• المؤلفون الرئيسيون: LIU, Kaiping, TAN, Hee Beng Kuan, SHAR, Lwin Khin
• التنسيق: text
• اللغة: English
• منشور في: Institutional Knowledge at Singapore Management University 2012
• الموضوعات: SQL injection; vulnerabilities; code auditing; software security; static analysis; Web applications; Information Security; Software Engineering
• الوصول للمادة أونلاين: https://ink.library.smu.edu.sg/sis_research/4838; https://ink.library.smu.edu.sg/context/sis_research/article/5841/viewcontent/Semi_automated_verification_of_defense_against_SQL_injection_2012_av.pdf
• المؤسسة: Singapore Management University

Recent reports reveal that majority of the attacks to Web applications are input manipulation attacks. Among these attacks, SQL injection attack malicious input is submitted to manipulate the database in a way that was unintended by the applications' developers is one such attack. This paper pr...