To search, Click below search items. |
| All Published Papers Search Service |
|
|
|
Title |
An Approach to Detect and Prevent SQL Injection Attacks in Database Using Web Service |
|
Author |
IndraniBalasundaram, E. Ramaraj |
| Citation |
Vol. 11 No. 1 pp. 197-205 |
|
Abstract |
SQL injection is an attack methodology that targets the data residing in a database through the firewall that shields it. The attack takes advantage of poor input validation in code and website administration. SQL Injection Attacks occur when an attacker is able to insert a series of SQL statements in to a query by manipulating user input data in to a web-based application, attacker can take advantages of web application programming security flaws and pass unexpected malicious SQL statements through a web application for execution by the back-end database. This paper proposes a novel specification-based methodology for the prevention of SQL injection Attacks. The two most important advantages of the new approach against existing analogous mechanisms are that, first, it prevents all forms of SQL injection attacks second, Current technique does not allow the user to access database directly in database server. The innovative technique Web Service Oriented XPATH Authentication Technique is to detect and prevent SQL-Injection Attacks in database the deployment of this technique is by generating functions of two filtration models that are Active Guard and Service Detector of application scripts additionally allowing seamless integration with currently-deployed systems. |
|
Keywords |
Database security, world-wide web, web application security, SQL injection attacks, Runtime Monitoring |
|
URL |
