Semi-automated verification of defense against SQL injection in web applications

• Main Authors: LIU, Kaiping, TAN, Hee Beng Kuan, SHAR, Lwin Khin
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2012
• Subjects: SQL injection; vulnerabilities; code auditing; software security; static analysis; Web applications; Information Security; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/4838; https://ink.library.smu.edu.sg/context/sis_research/article/5841/viewcontent/Semi_automated_verification_of_defense_against_SQL_injection_2012_av.pdf
• Institution: Singapore Management University

Recent reports reveal that majority of the attacks to Web applications are input manipulation attacks. Among these attacks, SQL injection attack malicious input is submitted to manipulate the database in a way that was unintended by the applications' developers is one such attack. This paper pr...