LsSQLIDP : Literature survey on SQL injection detection and prevention techniques

Abstract

Every smallest service on the internet is made available through web applications. Services like online shopping, online banking system, e-booking system for railways or airlines and many more are all available at your doorstep with the help of internet. With these numerous applications comes the bulk amount of data they store on daily basis in their backend databases. The issue is how to store the data in an efficient and secure manner so that it should not be misused. Nowadays most of the applications use Cloud storage for this purpose. But is the data really secured on Cloud? With the increasing cases of cyber attacks one can figure out the answer to this question. The attacks like code injection attacks, denial of service attack, spoofing, phishing attack, http flood attack et al. are some of the major attacks challenging the protection of these applications. One of the major harmful attacks is SQL injection attacks (SQLinAs). There are several detection and prevention techniques for the same yet the applications are highly vulnerable to SQLinAs. To better understand the attack, all the existing types, detection and prevention techniques for SQLinAs are analyzed and showcased in this paper.

Keywords:

• SQL Injection
• Attacks
• Comparative study
• Detection
• Prevention
• Evaluation