doi: 10.7763/IJCTE.2017.V9.1165
SQL Injection Attacks Detection & Prevention Techniques
Gülsüm Yiğit
,
Merve Arnavutoğlu
- Electronics and Computer Engineering Department, University of Gaziantep, Turkey.
Abstract
SQL Injection Attack (SQLIA) is a type of code injection technique that threatens confidentiality, integrity, and availability of web databases. The attacker mostly exploits incorrectly filtered user inputs such as text fields in web applications and tries to insert malicious SQL statements into a legitimate query via the vulnerable user input. By doing so, the attacker can access, insert, modify, or delete critical information in a database without proper authorization. In this survey, we describe and categorize types of SQLIA, and analyze existing detection and prevention techniques against such attacks.
Keywords
- SQL injection
- attacks
- cyber security
How to Cite
Gülsüm Yiğit and Merve Arnavutoğlu, "SQL Injection Attacks Detection & Prevention Techniques," International Journal of Computer Theory and Engineering, vol. 9, no. 5, pp. 351-356, 2017. https://doi.org/10.7763/IJCTE.2017.V9.1165
Copyright & License
Copyright © 2017 by the authors. This is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited (CC BY 4.0).