This paper describes an advanced SQL injection technique where DNS resolution process is exploited for retrieval of malicious SQL query results. Resulting DNS requests are intercepted by attackers themselves at the controlled remote name server extracting valuable data. Open source SQL injection tool sqlmap [1] has been adjusted to automate this task. With modifications done, attackers are able...

Intrusion Prevention System (IPS) merupakan salah satu tool pengamanan pada jaringan. Pada penelitian ini Suricata sebagai IPS untuk melindungi webserver dari serangan SQL Injection menggunakan SQLMap dengan melihat efektifitas rules dan parameter response time. Penelitian dilakukan di dalam sebuah Laboratorium fakultas topologi jaringan LAN yang setting static. terinstal PC berfungsi router se...

In order to evaluate approaches for offering relational database classes on the web, we recognized the need for extracting web page content from relational database management systems. "Content" in this context refers to dynamic XML data that is reformatted into HTML pages. This paper describes the issues, advantages, and limitations of two approaches for extracting web content dynamically. It ...

We present SD-SQL Server, a prototype scalable distributed database system. It let a relational table to grow over new storage nodes invisibly to the application. The evolution uses splits dynamically generating a distributed range partitioning of the table. The splits avoid the reorganization of a growing database, necessary for the current DBMSs and a headache for the administrators. We illus...

Recently, there has been much renewed interest in re-architecting database systems to exploit new hardware. While some efforts have suggested that one needs specialized engines (“one size does not fit all”), the approach pursued by Microsoft’s SQL Server has been to integrate multiple elements into a common architecture. This brings customers what they want by reducing data impedance mismatches...

THE CHALLENGE IT organizations must maintain service level agreements (SLAs) by meeting the demands of applications that work on a SQL Server. To meet these requirements they must deliver superior performance and continuous uptime of each SQL Server instance. The primary objective is to improve response times affordably and the biggest bottleneck is the time it takes to post (write) transaction...

A novel approach based on applying a modern metaheuristic called Gene Expression Programming (GEP) to detecting web application attacks is presented in the paper. This class of attacks relates to malicious activity of an intruder against applications, which use a database for storing data. The application uses SQL to retrieve data from the database and web server mechanisms to put them in a web...

Most of the FIMI implementations are memory-like. However when we deal with data warehouse the size of datasets are extremely huge for memory copy. However, using a pure SQL-like approach is inefficient, even almost implementations rarely take advantages of SQL-Extensions such as SQL-Cursors, Store Procedures and UDF functions. Furthermore, RDBMS vendors offer a lot of SQL-Extensions for taking...

This article explains how to add spatial search functions (point-near-point and point in polygon) to Microsoft SQL ServerTM 2005 using C# and table-valued functions. It is possible to use this library to add spatial search to your application without writing any special code. The library implements the public-domain C# Hierarchical Triangular Mesh (HTM) algorithms from Johns Hopkins University....