Implementation of Smart Filter to Avoid Sql Injections with Signature Based Intrusion Detection

In this paper, we present a detailed discussion on different SQL injection attacks and their prevention technique. In addition, we proposed a new technique for prevention of SQL injection attack for web application. To address the problems of SQL injections, we proposed a technique that uses a concept of filter called ―Smart Filter‖, that avoid the SQL injections with static matching and dynamic signature based intrusion detection mechanism with MS SQL database web application. This smart filter actually works in between the web application & database server. Therefore, before sending SQL queries to the database, the smart filter will analyse the query to check the vulnerability. If found any, it reported else it forwards the query to database server. Apart from the checking the SQL query by smart filter, it also reports the new vulnerabilities found in SQL queries. The proposed scheme is efficient and overhead is negligible. Therefore, we strongly suggest the proper use of anti-vulnerable techniques in the e-commerce website development.