SQLrand: Preventing SQL injection attacks

DOI10.1007/978-3-540-24852-1_21MaRDI QIDQ4680948zbMATH OpenOpenAlexFDO

Authors Stephen W. Boyd, Angelos D. Keromytis

Publication date 13 June 2005

Published in Lecture Notes in Computer Science (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1007/b98360

Mathematics Subject Classification ID

Data encryption (aspects in computer science) (68P25) Cryptography (94A60) Authentication, digital signatures and secret sharing (94A62)

Recommendations

• A novel method for SQL injection attack detection based on removing SQL query attribute values
• Preventing injection attacks with syntax embeddings
• Defining code-injection attacks
• The essence of command injection attacks in web applications
• Information and Communications Security

Cited in

(9)

• Protecting cookies against cross-site scripting attacks using cryptography
• Defining code-injection attacks
• A novel method for SQL injection attack detection based on removing SQL query attribute values
• Simple linear string constraints
• A survey on server-side approaches to securing web applications
• The essence of command injection attacks in web applications
• Preventing injection attacks with syntax embeddings
• Simple and safe SQL queries with \texttt{C++} templates
• A theory of injection-based vulnerabilities in formal grammars

This page was built for publication: SQLrand: Preventing SQL injection attacks

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q4680948)