SQL Injection: Classification and Prevention

Aditya Rai, MD. Mazharul Islam Miraz, Deshbandhu Das, Harpreet Kaur, Swati

20212021 2nd International Conference on Intelligent Engineering and Management (ICIEM)22 citationsDOI

Abstract

With the world moving towards digitalization, more applications and servers are online hosted on the internet, more number of vulnerabilities came out which directly affects an individual and an organization financially and in terms of reputation too. Out of those many vulnerabilities such as Injection, Deserialization, Cross site scripting and more. Injection stand top as the most critical vulnerability found in the web application. Injection itself is a broad vulnerability as it further consists of SQL Injection, Command injection, LDAP Injection, No-SQL Injection etc. In this paper we have reviewed SQL Injection, different types of SQL injection attacks, their causes and remediation to comprehend this attack.

Topics & Concepts

SQL injectionComputer scienceCross-site scriptingVulnerability (computing)Scripting languageSQLLightweight Directory Access ProtocolServerThe InternetComputer securityAutocommitUser-defined functionDatabaseWorld Wide WebQuery by ExampleOperating systemWeb application securityWeb developmentInternet Authentication ServiceDirectoryLog shippingSearch engineWeb search queryWeb Application Security VulnerabilitiesSecurity and Verification in ComputingSpam and Phishing Detection