• DocumentCode
    260637
  • Title

    Secured web application using combination of Query Tokenization and Adaptive Method in preventing SQL Injection Attacks

  • Author

    Abu Othman, Noor Ashitah ; Ali, Fakariah Hani Mohd ; Binti Mohd Noh, Mashyum

  • Author_Institution
    Fac. of Comp. & Math. Sci., Univ. Teknol. MARA, Shah Alam, Malaysia
  • fYear
    2014
  • fDate
    2-4 Sept. 2014
  • Firstpage
    472
  • Lastpage
    476
  • Abstract
    SQL Injection Attacks (SQLIAs) become a major issue nowadays which open opportunities for unrestricted access to the database that underlie web applications. The purpose of this research is to develop a multi-level prevention techniques in order to cater the SQLIAs. The proposed prevention technique combines Query Tokenization and Adaptive Method that will be implemented on multiple platforms that using asp.net programming language. This technique was tested using 5 test cases to ensure it effectiveness. The outcome of this project is frameworks of prevention technique that can be used for other developer to make sure their web application being secured and avoid the hackers exploit the databases by using SQL injection.
  • Keywords
    Internet; SQL; program testing; query processing; security of data; SQL injection attacks; SQLIA; adaptive method; asp.net programming language; databases; hackers; prevention technique; query tokenization; secured Web application; test cases; Databases; Monitoring; Adaptive Method; Query Tokenization; SQL Injection Attacks; Secure Web Application;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Computer, Communications, and Control Technology (I4CT), 2014 International Conference on
  • Conference_Location
    Langkawi
  • Print_ISBN
    978-1-4799-4556-6
  • Type

    conf

  • DOI
    10.1109/I4CT.2014.6914229
  • Filename
    6914229