Safwat, E., Mahgoub, H., Bahgat, A., Keshk, A. (2014). AN EFFICIENT TECHNIQUE FOR SQL INJECTION DETECTION AND PREVENTION. test, 3(1), 57-74. doi: 10.21608/ijci.2014.33968
E. M. Safwat; H. Mahgoub; Ashraf Bahgat; Arabi Keshk. "AN EFFICIENT TECHNIQUE FOR SQL INJECTION DETECTION AND PREVENTION". test, 3, 1, 2014, 57-74. doi: 10.21608/ijci.2014.33968
Safwat, E., Mahgoub, H., Bahgat, A., Keshk, A. (2014). 'AN EFFICIENT TECHNIQUE FOR SQL INJECTION DETECTION AND PREVENTION', test, 3(1), pp. 57-74. doi: 10.21608/ijci.2014.33968
Safwat, E., Mahgoub, H., Bahgat, A., Keshk, A. AN EFFICIENT TECHNIQUE FOR SQL INJECTION DETECTION AND PREVENTION. test, 2014; 3(1): 57-74. doi: 10.21608/ijci.2014.33968

AN EFFICIENT TECHNIQUE FOR SQL INJECTION DETECTION AND PREVENTION

IJCI. International Journal of Computers and Information
Article 5, Volume 3, Issue 1, June 2014, Pages 57-74    PDF (771.96 K)
Document Type: Original Article
DOI: 10.21608/ijci.2014.33968
Authors
E. M. Safwat1; H. Mahgoub2; Ashraf Bahgat3; Arabi Keshk3
1Computer science Department Faculty of computer and information, Menofia University
2Computer science Department, Faculty of computer and information Menoufyia University
3Faculty of Computer and Information Menoufia University
Abstract
With the recent rapid increase of interactive web applications that employ back-end database services, a SQL injection attack has become one of the most serious security threats. This type of attack can compromise confidentiality and integrity of information and database. Actually, an attacker intrudes to the web application database and consequently, access to data. For preventing this type of attack different techniques have been proposed by researchers but they are not enough because most of implemented techniques cannot stop all type of attacks. In this paper our proposed technique are detection of SQL injection and prevention based on first order, second order and blind SQL injection attacks online. The proposed technique implemented in JAVA and evaluated for seven types of SQL injection attacks. Experimental results have shown that the proposed technique is efficient related to execution time overhead. Our technique need to be one second overhead to execution time. Moreover, we have compared the proposed technique with the popular web application vulnerabilities scanner techniques. The most advantages of proposed technique Its easiness to adopt by software developer, having the same syntactic structure as current popular record set retrieval methods.
Keywords
Web application; Database SQL Injection Attack; detection; prevention
Statistics
Article View: 302
PDF Download: 710