Intercepting Filter Approach to Injection Flaws

The growing number of web applications in the global economy has made it critically important to develop secure and reliable software to support the economy’s increasing dependence on web-based systems. We propose an intercepting filter approach to mitigate the risk of injection flaw exploitationone of the most dangerous methods of attacking web applications. The proposed approach can be implemented in Java or .NET environments following the intercepting filter design pattern. This paper provides examples to illustrate the proposed approach. Keywords—Injection Flaws, SQL Injection, Intercepting Filter, Cross-site Scripting Vulnerability