Application layer intrusion detection for SQL injection

Proceedings of the Annual Southeast Conference

Volumn 2006, Issue , 2006, Pages 531-536

  Rietta, Frank S ^a  

^a NONE   (United States)

Author keywords

Anomaly detection; Database security; SQL injection

Indexed keywords

ANOMALY DETECTION; DATABASE SECURITY; DATABASE TRAFFIC; SQL INJECTION;

ACCESS CONTROL; COMPUTER CRIME; DATA PRIVACY; QUERY LANGUAGES; RISK ANALYSIS; SERVERS;

INTRUSION DETECTION;

EID: 34248401104     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1185448.1185564     Document Type: Conference Paper

References (10)

1. S. Boyd and A. Keromytis. Sqlrand: Preventing sql injection attacks, 2004.
2. A. C. Cyrus Peikari. Security Warrior. O'Reilly Media, Inc., Sabastopol, CA, 2004.
3. D. D. W. L. Guofei Gu, Prahlad Fogla and B. Skoric. Measuring intrusion detection capability: An information-theoretic approach. In Proceedings of A CM Symposium on InformAction, Computer and Communications Security (ASIACCS'06).
4. W. Halfond and A. Orso. AMNESIA: Analysis and Monitoring for NEutralizing SQL-Injection Attacks. In Proceedings of the IEEE and ACM International Conference on Automated Software Engineering (ASE 2005), pages 174-183, Long Beach, CA, USA, Nov 2005.
5. G. Hoglund and G. McGraw. Exploiting Software: How to Break Code. Addison-Wesley Professional, Boston, MA, 2004.
6. O. Maor and A. Shulman. Sql injection signatures evasion: An overview of why sql injection signature protection is just not enough. http://www.imperva. com/application_defense_center/white_papers/sql_injection_signation_evasion. html, 2004.
7. K. Spett. Sql injection: Are your web applications vulnerable? http://www.spidynamics.com/whitepapers/WhitepaperSQLInjection.pdf, 2002.
8. L. Spitzner. Honeytokens: The other honeypot. http://www.securityfocus. com/infocus/1713, July 2003.
9. J. Viega and G. McGraw. Building Secure Software: How to Avoid Security Problems the Right Way. Addison-Wesley Professional, Boston, MA, 2001.
10. K. Wang and S. J. Stolfo. Anomalous payload-based network intrusion detection. In RAID, pages 203-222, 2004.