NDLI: PSIAQOP: preventing SQL injection attacks based on query optimization process

Please wait, while we are loading the content...

Neural network based classification of digitized mammograms

Trustpert: a reputation model for collaboration in MANETs using fuzzy expert systems

A design methodology for video transmission of controlling an internet based noninterventional mobile robot for orthopedic surgeon (OTOROB)

Defining and computing a value based cyber-security measure

Students' attitudes towards communicating with instructors via internet: a case study in the College of Engineering & Petroleum: Kuwait University

Data base management systems trends: an empirical study

SECaaS: security as a service for cloud-based applications

Stakeholders' perspectives of LIS students' ICT skills in Kuwait

PSIAQOP: preventing SQL injection attacks based on query optimization process

A collaborative reputation-based vetting model for online certification of businesses

Design of educational multimedia interfaces: individual differences of learners

Towards an efficient e-learning system based on cloud computing

University students' satisfaction of studying in e-university: Hamdan Bin Mohammed e-University case study

SLG: an online educational simulation game to teach programming concepts

Diabetes care in the age of informatics: Kuwait-Scotland health innovation network

Data aggregation for evolving wireless sensor networks using W-LEACH

Service oriented architecture-based framework for WBAN-enabled patient monitoring system

Determinants of quality assurance for common good in an e-environment of man-machine symbiosis: "quality is the sine qua non of the digital economy"

Fuzzy-based ontology intelligent DSS to strengthen government bilateral economic relations

Procrastination in online learner-led courses

Indoor access point optimization using differential evolution

A proposed semantic machine translation system for translating Arabic text to Arabic sign language

Assessment of the trustworthiness of e-service providers

PSIAQOP: preventing SQL injection attacks based on query optimization process

Content Provider	ACM Digital Library
Author	Al-Khashab, Eidah Salman, Ayed A. Al-Anzi, Fawaz S.
Abstract	In computer security terminologies, SQL Injection Attacks (SQLIAs) are attacks that pose a security threats to web applications by manipulating, modifying, retrieving or destructing sensitive information underlying database server through web applications. This type of attacks could compromise data confidentiality, integrity and availability of database systems of the online applications. Although many researchers and developers were focusing on preventing this type of attack, and proposing techniques to overcome this problem, those methods either fails in correctly addressing this type of attacks or have some limitation on preventing all types of SQLIAs. In this paper, we present an extensive review of different types of SQLIAs known to date, analyze different types of recently developed defensive mechanisms, and show how each technique could be helpful in preventing or detecting each SQL Injection Attacks type. We also propose a PSIAQOP (Preventing SQL Injection Attacks based on Query Optimization Process), a novel approach that prevents all SQLIAs types. The key idea in this approach is to take advantage from the query optimization process that depends on heuristics rules in preventing the different types of the SQLIAs.
Starting Page	1
Ending Page	8
Page Count	8
File Format	PDF
ISBN	9781450307932
DOI	10.1145/2107556.2107566
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2011-04-05
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Relational algebra Sql injection attacks Web application Database Query optimization
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Countering sql injection attacks with a database driver.

Translating SQL Into Relational Algebra: Optimization, Semantics, and Equivalence of SQL Queries

SQL-IDS: a specification-based approach for SQL-injection detection

Detection and prevention of sql-injection attacks of web application using comparing the length of sql query length.

Protecting web applications from SQL injection attacks by using framework and database firewall

Relational algebra and sql query visualisation (2010).

Multi-level preventing SQL injection attacks

DATABASE LEVEL IDS FOR DETECTING AND PREVENTING SQL INJECTION ATTACKS

SIUQAPTT: SQL Injection Union Query Attacks Prevention Using Tokenization Technique

PSIAQOP: preventing SQL injection attacks based on query optimization process

Similar Documents

Countering sql injection attacks with a database driver.

Translating SQL Into Relational Algebra: Optimization, Semantics, and Equivalence of SQL Queries

SQL-IDS: a specification-based approach for SQL-injection detection

Detection and prevention of sql-injection attacks of web application using comparing the length of sql query length.

Protecting web applications from SQL injection attacks by using framework and database firewall

Relational algebra and sql query visualisation (2010).

Multi-level preventing SQL injection attacks

DATABASE LEVEL IDS FOR DETECTING AND PREVENTING SQL INJECTION ATTACKS

SIUQAPTT: SQL Injection Union Query Attacks Prevention Using Tokenization Technique

PSIAQOP: preventing SQL injection attacks based on query optimization process