Analysis of the defending possibilities against SQL Injection attacks
Article Sidebar
Open full text
Published:
Dec 30, 2019
Issue Vol. 13 (2019)
Articles
-
Machine Learning as a method of adapting offers to the clients
Jacek Bielecki, Oskar Ceglarski, Maria Skublewska-Paszkowska267-271
-
The insulin activity model based on insulin profiles
Tomasz Nowicki272-278
-
UML – a survey on technical university students in Lublin
Kamil Żyła, Adam Ulidowski, Jan Wrzos, Bartłomiej Włodarczyk, Krzysztof Krocz, Patryk Drozd279-282
-
Overview of Big Data platforms
Gabriel Wróbel, Maciej Daniel Wikira283-287
-
Solutions for managing IT projects in the cloud
Grzegorz Szydlowski288-292
-
Performance analysis of the Symfony framework for creating modern web application based on selected versions
Aleksander Wójcik, Mateusz Wolski, Jakub Bartłomiej Smołka293-297
-
Comparative analysis of databases working under the control of Windows system
Serhii Stets, Grzegorz Kozieł298-301
-
Applying of machine learning in the construction of a voice-controlled interface on the example of a music player
Jakub Basiakowski302-309
-
Application of neural networks to the analysis of consumer opinions
Roman Mysan, Ivan Loichuk, Małgorzata Plechawska-Wójcik310-314
-
Comparative analysis of frameworks dedicated to enterprise designing
Katarzyna Curyła, Karolina Habernal315-322
-
Extraction of parameters from biometric data samples
Paweł Danek, Krzysztof Ćwirta, Piotr Kopniak323-331
-
WebAssembly as an alternative solution for JavaScript in developing modern web applications
Dawid Suryś, Piotr Szłapa, Maria Skublewska-Paszkowska332-338
-
Analysis of the defending possibilities against SQL Injection attacks
Chrystian Byzdra, Grzegorz Kozieł339-344
-
Comparison of 3D games’ efficiency with use of CRYENGINE and Unity game engines
Hubert Żukowski345-348
-
Research of an Entity-component-system architectural pattern designed with using of Data-oriented design technique
Dawid Masiukiewicz, Daniel Masiukiewicz, Jakub Smołka349-353
-
Comparative analysis of Kotlin and Java languages used to create applications for the Android system
Daniel Sulowski, Grzegorz Kozieł354-358
-
A performance comparison of garbage collector algorithms in Java Virtual Machine
Igor Kopeć, Jakub Smołka359-365
-
Innovative applications of digital solutions and tools in educating IT school students
Michalina Gryniewicz-Jaworska366-370
Main Article Content
DOI
Authors
Chrystian Byzdra
Lublin University of Technology, Poland
Grzegorz Kozieł
Lublin University of Technology, Poland
Abstract
The article describes various protection methods of database and types of SQL Injection attacks. These are extremely dangerous attacks because they threaten the confidentiality of sensitive data. In order to analyze in detail protection methods and methods of attacks, simulations of attacks and defence were performed in the following languages: C #, PHP, Java. Based on the simulation results for particular languages, the effectiveness and efficiency of database protection methods were compared.
Keywords:
SQL injection; prevention; input validation
References
[1] Clarke J.: SQL Injection Attacks and Defense, Syngress Publishing, 2009
[2] Somesh J., Christodorescu M., Wang C., Maughan D., Song D.: Malware Detection, Springer, 2006
[3] Snyder C., Southwell M.: Pro PHP Security, Apress, 2005
[4] Sadeghian A., Zamani M., Ibrahim S.: SQL Injection is Still Alive:A Study on SQL Injection Signature Evasion Techniques, IEEE, 2013
[5] Heydari M.Z.: Comparision of SQL Injection Detection and Prevention Techniques, ICETC, 2010
[6] Halfond W.G.J., Viegas J., Orso A.: A Classification of SQL Injection Attacks and Countermeasures, IEEE, 2006
[7] Lambert N., Song Lin K.: Use of Query Tokenization to detect and prevent SQL Injection Attacks, IEEE, 2010
[8] Kar D., Panigrahi S.: Prevention of SQL Injection Attack Using Query Transformation and Hashing, IEEE, 2012
[9] Amutha Prabakar M., KarthiKeyan M., Marimuthu K.: An efficient technique for preventing SQL Injection attack using pattern matching algorithm, IEEE, 2013
[10] Wei K., Muthuprasanna M., Kothari S.: Preventing SQL Injection Attacks in Stored Procedures, IEEE, 2006
[11] Specyfikacja języka C# http://docs.microsoft.com/pl-pl/dotnet/csharp/language-reference/language-specification/introduction [20.05.2019]
[12] Podstawy programowania w języku Java, https://docs.oracle.com/javase/tutorial/java/index.html [13.05.2019]
[13] Dokumentacja techniczna języka PHP, https://www.php.net/manual/en/ [11.04.2019]
[14] Opis standardów i składni języka SQL, http://bazy.rzeszow.pl/klasy/klasa3bazy/sql.pdf [15.05.2019]
[15] Wykład z języka SQL przedstawiający podstawowe funkcje, https://www.mechanikryki.pl/renata/pliki_pdf/SQL.pdf [15.05.2019]
[2] Somesh J., Christodorescu M., Wang C., Maughan D., Song D.: Malware Detection, Springer, 2006
[3] Snyder C., Southwell M.: Pro PHP Security, Apress, 2005
[4] Sadeghian A., Zamani M., Ibrahim S.: SQL Injection is Still Alive:A Study on SQL Injection Signature Evasion Techniques, IEEE, 2013
[5] Heydari M.Z.: Comparision of SQL Injection Detection and Prevention Techniques, ICETC, 2010
[6] Halfond W.G.J., Viegas J., Orso A.: A Classification of SQL Injection Attacks and Countermeasures, IEEE, 2006
[7] Lambert N., Song Lin K.: Use of Query Tokenization to detect and prevent SQL Injection Attacks, IEEE, 2010
[8] Kar D., Panigrahi S.: Prevention of SQL Injection Attack Using Query Transformation and Hashing, IEEE, 2012
[9] Amutha Prabakar M., KarthiKeyan M., Marimuthu K.: An efficient technique for preventing SQL Injection attack using pattern matching algorithm, IEEE, 2013
[10] Wei K., Muthuprasanna M., Kothari S.: Preventing SQL Injection Attacks in Stored Procedures, IEEE, 2006
[11] Specyfikacja języka C# http://docs.microsoft.com/pl-pl/dotnet/csharp/language-reference/language-specification/introduction [20.05.2019]
[12] Podstawy programowania w języku Java, https://docs.oracle.com/javase/tutorial/java/index.html [13.05.2019]
[13] Dokumentacja techniczna języka PHP, https://www.php.net/manual/en/ [11.04.2019]
[14] Opis standardów i składni języka SQL, http://bazy.rzeszow.pl/klasy/klasa3bazy/sql.pdf [15.05.2019]
[15] Wykład z języka SQL przedstawiający podstawowe funkcje, https://www.mechanikryki.pl/renata/pliki_pdf/SQL.pdf [15.05.2019]
Article Details
Abstract views: 556
License

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
