A database security testing scheme of web application
Yang Haixia, Nan Zhihong · 2009
SQL injection attacks have posed a serious security threat to Web Databases. To address this problem, this paper presents a scheme of database security testing. It studies how to detect potential input points of SQL injection, automatically generate test cases and find vulnerability of databases by running these test cases to make a simulation attack to an application. The database security testing can stop up SQL attack channels in the beginning.