Font Level Tainting: Another Approach for Preventing SQL Injection Attacks

نویسندگان

  • V. Krishna Pratap
  • S. Tulasi Prasad
  • Srinivasa Rao
چکیده

the font level tainting is the another new approach for preventing sql injection attacks, that involves comparing the meta strings library with the sql statements that includes the characters including the different font levels in the user input, to prevent them if found any and protecting the web applications against sql injection is discussed in this paper. this paper includes the strange idea of combining the declarative method and the quest method. sql injection is the main problem that occurs with web application security. it gives the attackers unauthorized access to the database containing the web applications which in turn leads to the cause of defects in the web applications. this is very serious. in declarative method point of view, it exhibits detection mode for sql injection, that uses the coupled way routing arrangement of amino acid code formulated from web application form parameter sent via the web server. on the other hand from the quest method point of view, it analyzes the transaction to find out the malicious access. in declarative method it uses an approach called schatten algorithm, not only to prevent the sql injection attacks, but also reduces the time and space complexity. this system was able to stop all of the

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Preventing Web Application Injections with Complementary Character Coding

Web application injection attacks, such as SQL injection and cross-site scripting (XSS) are major threats to the security of the Internet. Several recent research efforts have investigated the use of dynamic tainting to mitigate these threats. This paper presents complementary character coding, a new approach to character level dynamic tainting which allows efficient and precise taint propagati...

متن کامل

Dynamic Taint Tracking in Managed Runtimes

This paper provides a taxonomy of runtime taint tracking approaches for managed code, such as code written in Java, C#, PHP, Perl, or Ruby. It covers main applications of data tainting such as preventing web application vulnerabilities including crosssite scripting and SQL injection attacks, along with disallowing privacy-sensitive data leaks. In addition to giving an overview of related litera...

متن کامل

An Approach for Preventing SQL Injection Attack on Web Application

SQL injection attacks are one of the highest dangers for applications composed for the Web. These attacks are dispatched through uncommonly made client information on web applications that utilization low level string operations to build SQL queries.SQL injection weakness permits an assailant to stream summons straightforwardly to a web application's hidden database and annihilate usefulness or...

متن کامل

Automatically Hardening Web Applications Using Precise Tainting

Most web applications contain security vulnerabilities. The simple and natural ways of creating a web application are prone to SQL injection attacks and cross-site scripting attacks (among other less common vulnerabilities). In response, many tools have been developed for detecting or mitigating common web application vulnerabilities. Existing techniques either require effort from the site deve...

متن کامل

Detection and Prevention of SQL Injection Attacks

We depend on database-driven web applications for an ever increasing amount of activities, such as banking and shopping. When performing such activities, we entrust our personal information to these web applications and their underlying databases. The confidentiality and integrity of this information is far from guaranteed; web applications are often vulnerable to attacks, which can give an att...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

عنوان ژورنال:

دوره   شماره 

صفحات  -

تاریخ انتشار 2012