Journal Name:
International Journal of Computer Science and information security
Volume:
14
Issue:
6
Pages From:
479
To:
485
Date:
Wednesday, June 1, 2016
Keywords:
SQL Injection Attack, SQL Injection Attack Detection, SQL Injection Attack Prevention, Query Dictionary
Abstract:
SQL Injection Attack (SQLIA) is a technique of code injection, used to attack data driven applications especially front end web applications, in which heinous SQL statements are inserted (injected) into an entry field, web URL, or web request for execution. “Query Dictionary Based Mechanism” which help detection of malicious SQL statements by storing a small pattern of each application query in an application on a unique document, file, or table with a small size, secure manner, and high performance. This mechanism plays an effective manner for detecting and preventing of SQL Injection Attack (SQLIA), without impact of application functions and performance on executing and retrieving data. In this paper we proposed a solution for detecting and preventing SQLIAs by using Query Dictionary Based Mechanism
