期刊名称：International Journal of Advanced Research In Computer Science and Software Engineering
印刷版ISSN：2277-6451
电子版ISSN：2277-128X
出版年度：2012
卷号：2
期号：6
出版社：S.S. Mishra
摘要：With changing times, our dependence on the web applications for the fulfilment of our daily needs (like online shopping, banking, share trading, ticket booking, payment of bills etc.) has increased. Because of this, our confidential dat a is present in the databases of various applications on Web. The security of this myriad amount of data is a matter of major concern. In recent times, SQL Injection attacks have emerged as a major threat to database security. In this paper we define SQL Injections, illustrate how SQL Injections are performed. In addition we have also surveyed the various SQL Injection detection and Prevention tools and well-known attack methods. Finally, we have provided our solution to the problem and have assessed its performance
关键词：SQLIA; Database; Web application; SQL query; attacker
