Title :
Automated Fix Generator for SQL Injection Attacks
Author :
Dysart, Fred ; Sherriff, Mark
Author_Institution :
Dept. of Comput. Sci., Univ. of Virginia, Charlottesville, VA
Abstract :
A critical problem facing todaypsilas Internet community is the increasing number of attacks exploiting flaws found in Web applications. This paper specifically targets input validation vulnerabilities found in SQL queries that may lead to SQL Injection Attacks (SQLIAs). We introduce a tool that automatically detects and suggests fixes to SQL queries that are found to contain SQL Injection Vulnerabilities (SQLIVs). Testing was performed against phpBB v2.0, an open source forum package, to determine the accuracy and efficacy of our software.
Keywords :
Internet; SQL; query processing; security of data; Internet; SQL injection vulnerability; SQL query; Web application; automated fix generator; Application software; Computer science; Databases; Graphical user interfaces; Internet; Java; Reliability engineering; Software maintenance; Software reliability; Software testing; Automated Fix Generation; MySQL; PHP; SQL Injection Attack;
Conference_Titel :
Software Reliability Engineering, 2008. ISSRE 2008. 19th International Symposium on
Conference_Location :
Seattle, WA
Print_ISBN :
978-0-7695-3405-3
Electronic_ISBN :
1071-9458
DOI :
10.1109/ISSRE.2008.44
