Extensive Review of SQLIA's Detection and Prevention Techniques
Monali Ravindra Borade, Neeta Deshpande · 2013
Abstract — Security of web applications is becoming one of the major concerns today. As per our survey 70 % of web applications over the internet are vulnerable to SQL injection attacks (SQLIA’s). SQL injection attacks pose serious security threat to these databases and web applications. Through SQLIA’s attackers gain unrestricted access to the databases of applications and potentially sensitive information. Many methods to address this problem have been proposed in the literature, some having the scope for extension. Methods employ only a subset of the prevention and detection techniques. An extensive survey was done to review and uncover these issues. The paper strongly focuses on the review work of SQL injection attacks and their detection and prevention approaches known to date. This paper elaborates the survey done for 30 techniques and the attacks they can withstand. An in depth study of the techniques and their performance against SQLIA’s is focused in the paper. Also for each strategy its strengths and weaknesses are addressed along with comparative analysis.