A systematic review of detection and prevention techniques of SQL injection attacks

TitleA systematic review of detection and prevention techniques of SQL injection attacks
Publication TypeJournal Article
Year of Publication2021
AuthorsNasereddin M, ALKhamaiseh A, Qasaimeh M, Al-Qassas R
JournalInformation Security Journal: A Global Perspective
Date Published10/2021
ISSNPrint ISSN: 1939-3555 Online ISSN: 1939-3547
Keywordsdatabase attacks, Detection, mitigation, prevention, SQL injection, Web-application attacks
Abstract

SQL injection is a type of database-targeted attack for data-driven applications. It is performed by inserting malicious code in the SQL query to alter and modify its meaning, enabling the attacker to retrieve sensitive data or to access the database. Many techniques have been improved and proposed to detect and mitigate these types of attacks. This paper provides a systematic review for a pool of 60 papers on web applications’ SQL injection detection methods. The pool was selected using a developed searching and filtering methodology for the existing literature based on scholar databases (IEEE, ScienceDirect, and Springer) with the aim to provide specific answering for several research questions in the area of SQL injection detection. This provides a basis for the design and use of effective SQL injection detection methods.

URLhttps://www.tandfonline.com/doi/abs/10.1080/19393555.2021.1995537
DOI10.1080/19393555.2021.1995537

PDF version: 

Historia zmian

Data aktualizacji: 21/06/2023 - 14:27; autor zmian: Łukasz Zimny (lzimny@iitis.pl)