Study of SQL Injection Attacks and Countermeasures
Sayyed Mohammad Sadegh Sajjadi, Bahare Tajalli Pour · International Journal of Computer and Communication Engineering · 2013
SQL injection is an attack technique that exploits a security vulnerability occurring in the database layer of an application and a service.This is most often found within web pages with dynamic content.This paper provides taxonomy on SQL injection prevention and detection approaches.Furthermore, for each type of vulnerability, we provide descriptions of how attacks of that type could take advantage of that vulnerability and perform attack.We also present and analysis some of existing detection and prevention techniques against SQL injection attacks.Finally, we compare different type of approaches and techniques and provide a list of their deployment requirements.