Title :
A Detective Tool against SQL Injection Attacks Based on Static Analysis and Dynamic Monitor
Author :
Zijian Liu ; Lei Xu
Author_Institution :
Dept. of Comput. Sci. & Technol., Nanjing Univ., Nanjing, China
Abstract :
SQL injection exploits the weakness of server, causing damage to database and threating the benefit of both corporations and individuals. SQL injection attack is still one of the most serious security threats. This paper proposes a method with static analysis and dynamic monitor to detect SQL injection attacks. Comparing to the current tools, this tool can compute danger degree of user input and classify user behavior with lower time and space complexity.
Keywords :
SQL; computational complexity; program diagnostics; security of data; SQL injection attack detective tool; dynamic monitoring; security threats; space complexity; static analysis; time complexity; user behavior classification; user input danger degree; Conferences; Databases; Internet; Monitoring; Servers; Syntactics; SQL injection; danger degree; dynamic monitor; static analysis;
Conference_Titel :
Web Information System and Application Conference (WISA), 2013 10th
Conference_Location :
Yangzhou
Print_ISBN :
978-1-4799-3218-4
DOI :
10.1109/WISA.2013.45
