Overview of SQL Injection Defense Mechanisms
Igor Tasevski, Kire Jakimoski
Abstract
Today, in the era of rapidly changing and evolving IT Technology, the Internet Network has become one of the main daily needs of mankind. However, web applications such as online banking, web-based emails, social networking that are instant means of communication, are targeted by attackers where their main goal is to get important information about users and use them for their own purpose. One of the methods of targeting web applications and web-based information systems is using the SQL injection attacks. In this work main subject of the research is analysis of the methods of SQL injection attacks and creating an overview of the best defense mechanisms for detection and prevention of SQL injection attacks. Furthermore, practical simulation of SQL injection attack is done using Kali- inux platform for sensing the real threat from this kind of cyber-attack. Analysis of the best practices for defense from this kind of attacks is presented after the practical simulation. Aim of this is users to be more aware against this kind of cyber security attacks.