A survey of SQL injection defense mechanisms

International Conference for Internet Technology and Secured Transactions, ICITST 2009

Volumn , Issue , 2009, Pages

  Amirtahmasebi, Kasra ^a   Jalalinia, Seyed Reza ^a   Khadem, Saghar ^a  

^a CHALMERS UNIVERSITY OF TECHNOLOGY   (Sweden)

Author keywords

[No Author keywords available]

Indexed keywords

DIGITAL STORAGE;

DATA STORAGE; DEFENSE MECHANISM; PREPARED STATEMENT; PREVENTION TECHNIQUES; SENSITIVE INFORMATIONS; SQL INJECTION; SQL INJECTION ATTACKS;

SURVEYS;

EID: 77950319934     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/icitst.2009.5402604     Document Type: Conference Paper

References (10)

1. th International Static Analysis Symposium, SAS 03, volume 2694 of LNCS, pp 1-18. Springer-Verlag, June 2003.
2. Sam M.S. N.G, "SQL Injection Protection by Variable Normalization of SQL Statement", www.securitydocs.com/library/3388, 06/17/2005.
3. William G.J. Halfond, Allesandro Orso, "AMNESIA: Analysis and Monitoring for NEutralizing SQL Injection Attacks", ACM, USA, 2005, pp 174-183.
4. C.S. Institute. Computer crime and security survey. http://www.gocsi.com/ press/20020407.jhtml, 2002
5. Stephen Thomas, Laurie Williams, Tao Xie, "An Automated Prepared Statement Generation To Remove SQL Injection Vulnerabilities", Elsevier, USA, 2008.
6. Russell A. McClure, Ingolf H. Krüger, "SQL DOM: Compile Time Checking of Dynamic SQL Statements", IEEE Explore, USA, 2005.
7. G. S. Kc, A. D. Keromytis, and V. Prevelakis, "Countering Code-Injection Attacks with Instruction-Set Randomization", In Proceedings of the ACM Computer and Communications Security (CSS) Conference, October 2003, pp. 272-280
8. WG Halfond, J Viegas, A Orso , "A Classification of SQL Injection Attacks and Countermeasures" In Proceedings of the International Symposium on Secure Software Engineering, 2006
9. S. W. Boyd, and A. D. Keromytis, "SQLrand: Preventing SQL Injection Attacks", Springer Berlin / Heidelberg, Department of Computer Science, Columbia University, 2004, pp. 292-302
10. Ke Wei, M. Muthuprasanna, Suraj Kothari, "Preventing SQL Injection Attacks in Stored Procedures", Proceedings of the 2006 Australian Software Engineering Conference (ASWEC'06), IEEE, Australia, 2006, pp 1-7.