A novel method for SQL injection attack detection based on removing SQL query attribute values

DOI10.1016/J.MCM.2011.01.050zbMATH Open1245.94079OpenAlexW2020737857MaRDI QIDQ445359FDOQ445359

Authors Inyong Lee, Soonki Jeong, Jongsub Moon, Sangsoo Yeo

Publication date 24 August 2012

Published in Mathematical and Computer Modelling (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1016/j.mcm.2011.01.050

zbMATH Keywords

combined dynamic and static methodDBMSSQL injection attackSQL queryweb application

Mathematics Subject Classification ID

Cryptography (94A60)

Recommendations

• Applied Cryptography and Network Security
• The essence of command injection attacks in web applications
• Preventing injection attacks with syntax embeddings
• Defining code-injection attacks
• scientific article; zbMATH DE number 2013393

Cites work

• Applied Cryptography and Network Security
• The essence of command injection attacks in web applications

Cited in

(3)

• Preventing injection attacks with syntax embeddings
• The essence of command injection attacks in web applications
• Applied Cryptography and Network Security

Describes a project that uses

Uses Software

• AMNESIA
• PQL

This page was built for publication: A novel method for SQL injection attack detection based on removing SQL query attribute values

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q445359)