SQLPIL: SQL injection prevention by input labeling

SQL injection attacks (SQLIAs) aim at exploiting vulnerabilities in web applications in order to execute malicious SQL commands. It is established that prepared statements are resilient to SQLIAs, and thus, developers are advised to use them when constructing SQL queries as opposed to applying strin...

Ausführliche Beschreibung

Bibliographische Detailangaben

Veröffentlicht in:	Security and communication networks 2015-10, Vol.8 (15), p.2545-2560
Hauptverfasser:	Masri, Wes, Sleiman, Sam
Format:	Artikel
Sprache:	eng
Schlagworte:	Automation Commands data labeling/tainting flow tracking Java (programming language) prepared/parameterized statements program analysis Queries Query languages Run time (computers) SQL injection attacks Strings web applications
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!