DocumentCode
3077425
Title
Preventing SQL injection attacks using negative tainting approach
Author
Gadgikar, A.S.
Author_Institution
Dept. of Comput. Eng., D.Y. Patil Coll. of Eng., Pune, India
fYear
2013
fDate
26-28 Dec. 2013
Firstpage
1
Lastpage
5
Abstract
One of the major issues of web application security is SQL injection attacks, which gives attackers an unrestricted access to the database. Preventing SQL Injection attacks using negative tainting approach is an idea of incorporating the uniqueness of negative tainting with linked list structure. As most of the tools available today concentrates on positive tainting technique, less work has been done on negative tainting. So this approach has been chosen and it provides good response time for application programs where large databases are used. This system is able to stop most of the known successful attacks except stored procedures and character encoding attacks and generates very less (negligible) false positives.
Keywords
SQL; security of data; SQL injection attack; Web application security; negative tainting approach; positive tainting; Computational intelligence; Conferences; Data mining; Databases; Runtime; Security; Servers; SQL Injection; negative tainting; positive tainting;
fLanguage
English
Publisher
ieee
Conference_Titel
Computational Intelligence and Computing Research (ICCIC), 2013 IEEE International Conference on
Conference_Location
Enathi
Print_ISBN
978-1-4799-1594-1
Type
conf
DOI
10.1109/ICCIC.2013.6724140
Filename
6724140
Link To Document