SQL injection attacks countermeasures assessments

<span>SQL injections attacks have been rated as the most dangerous vulnerability of web-based systems over more than a decade by OWASP top ten. Though different static, runtime and hybrid approaches proposed to counter SQL injection attacks, no single approach guarantees flawless prevention/ detection for these attacks. Hundreds components open source commercial software products are reported be vulnerable CVE repository every year. In this mapping study, we identify existing in terms cost computation protection offered. We found that techniques claim offer based on testing very small or limited scale. This study dissects each highlights their strengths weaknesses categorizes them underlying technology used detect attacks.</span>